Use these ports to configure a firewall to allow traffic to and from your ePO - On-prem server.
Relevant terms
Bidirectional — The remote or local system can initiate the connection.
Inbound — The remote system initiates the connection.
Outbound — The local system initiates the connection.
Port | Default | Description | Traffic direction |
|---|---|---|---|
Agent-server communication port | 80 | TCP port opened by the ePO - On-prem server service to receive requests from agents. | Bidirectional between the Agent Handler and the ePO - On-prem server and inbound from Trellix Agent to Agent Handlers and ePO - On-prem server. |
Agent communicating over SSL | 443 | By default, agents must communicate over SSL (443 by default). This port is also used for the Remote Agent Handler to communicate with the ePO - On-prem main Repository. | Outbound connection from ePO - On-prem server to Trellix Source Site for secure content updates. Inbound connection:
Outbound connection:
|
Agent wake-up communication port SuperAgent repository port | 8081 | TCP port opened by agents to receive agent wake-up requests from the ePO - On-prem server. TCP port opened to replicate repository content to a SuperAgent repository. | Outbound connection from the ePO - On-prem server and Agent Handler to the Trellix Agent. |
Agent broadcast communication port | 8082 | UDP port opened by SuperAgent to forward messages from the ePO - On-prem server and Agent Handler. | Outbound connection from the SuperAgent to other agents. |
Console-to-application server communication port | 8443 | HTTPS port opened by the ePO - On-prem Application Server service to allow web browser console access. | Inbound connection to the ePO - On-prem server from the ePO - On-prem console. |
Client-to-server authenticated communication port | 8444 | Used by the Agent Handler to communicate with the ePO - On-prem server to get required information (for example, LDAP servers). | Outbound connection from remote Agent Handlers to the ePO - On-prem server. |
SQL Server TCP port | 1433 | TCP port used to communicate with the SQL Server. This port is specified or determined automatically during the setup process. | Outbound connection from the ePO - On-prem server and Agent Handler to the SQL Server. |
SQL Server UDP port | 1434 | UDP port used to request the TCP port that the SQL instance hosting the ePO - On-prem database is using. | Outbound connection from the ePO - On-prem server and Agent Handler to the SQL Server. |
Default LDAP server port | 389 | LDAP connection to look up computers, users, groups, and Organizational Units for User-Based Policies. | |
Default SSL LDAP server port | 636 | User-Based Policies use the LDAP connection to look up users, groups, and Organizational Units. | Outbound connection from the ePO - On-prem server and Agent Handler to an LDAP server. |