Firewall System Prerequisites
If there is a firewall blocking network traffic, open the following ports. Same rules apply for the local Windows Firewall, based on the computer’s role in the deployment.
| Source | Destination | Protocol | Port | Direction | Notes |
|---|---|---|---|---|---|
| ITM On-Prem Agent (ObserveIT Agent) machines | ITM On-Prem (ObserveIT) Application Servers | TCP | 443 | One-way | Encrypted Agent traffic |
| ObserveIT administrator workstation | ITM On-Prem Web Console | TCP | 443 | One-way | Encrypted Web Console access |
| ITM On-Prem (ObserveIT) Application Servers ITM On-Prem Web Console | SQL server | TCP | 1433 | One-way | Database access for ObserveIT components |
| ITM On-Prem (ObserveIT) Application Servers | ITM On-Prem (ObserveIT) Application Servers | TCP | 445 | One-way | ObserveIT Hot Storage access |
| ITM On-Prem (ObserveIT) Application Servers | ITM On-Prem (ObserveIT) Application Server load balancer | TCP | 443 | One-way | Screenshot Storage Optimizer task access |
| ITM On-Prem (ObserveIT) Application Servers ITM On-Prem Web Console | File server hosting ObserveIT Warm Storage | TCP | 445 | One-way | ObserveIT Warm Storage access |
| ITM On-Prem Web Console | ITM On-Prem (ObserveIT) Application Servers | TCP | 443 | One-way | ITM On-Prem (ObserveIT) Application component health check |
| ITM On-Prem (ObserveIT) Application Servers | ObserveIT Web Categorization module | TCP | 8000 | One-way | ITM On-Prem (ObserveIT) Application Server access to the Web Categorization module |
| ObserveIT Web Categorization module | https://nsv10.netstar-inc.com/ https://dss.netstar-inc.com/ gcftelemetry.netstar-inc.com (for Telemetry) |
TCP | 443 | One-way | ObserveIT Web Categorization module update access service |
Related Topic: