Applicable versions: Seqrite Endpoint Protection 8.X
File Extensions to be allowed:
This extension should be allowed in the Network firewall for definition updates:
“.dat”, “.bin”
Ports and URLs to be allowed:
The following ports and URLs should be allowed/whitelisted in the Network firewall.
| Sr. No. | Purpose | Source | Destination | Protocol | URL | Port |
|---|---|---|---|---|---|---|
| 1 | Activation & Licensing | Server | Internet | TCP | https://actnexgen.quickheal.com/* | 443 |
| 2 | Definition Update | Server | Internet | TCP | http://dlupdate.quickheal.com/* http://download.quickheal.com/* |
80 |
| 3 | Server Client Communication | mongod | Within Server | TCP | NA | 27017 |
| Redis | Within Server | TCP | NA | 6379 | ||
| wildfly | Client | Server | TCP | NA | 8080 Load balancing happened through Nginx and Nginx will redirect this to Wildfly |
|
| wildfly | Client | Server | TCP | NA | 8443 | |
| 4 | Required external CDN server | Server & Client | Internet | TCP | http://dlupdate.quickheal.com/* http://download.quickheal.com/* |
8765 |
| 5 | NGINX | Client | Server | TCP | NA | 443 |
| 6 | zookeeper | Within Server | TCP | NA | 2181 | |
| 7 | kafka | Within Server | TCP | NA | 9092 | |
| 8 | Cloud based Security | Server & Client | Internet | TCP |
http://prourl.itsecure.co.in/* http://encurl.itsecure.co.in/* http://klassify.itsecure.co.in/* http://prourl.itonlinesecure.in/* http://encurl.itonlinesecure.in/* https://protecti.quickheal.com/* |
8080 443 |
| 9 | Roaming | Server & Client | Internet | TCP | https://epsngrp.seqrite.com | 8080 443 |
| 10 | Patch Management | Patch Server | Internet | TCP |
http://*.windowsupdate.microsoft.com/ http://download.microsoft.com/ http://*.download.windowsupdate.com/ http://wustat.windows.com/ http://ntservicepack.microsoft.com/ http://go.microsoft.com/ https://*.update.microsoft.com/ |
8080 443 |
| Patch Client | Patch Server | TCP | https://patchserver-IP-address | 6201 3698 |
Notes:
- Allow the file extensions .bin &.dat to download daily definition updates.
- If any custom ports configured by the Administrator during installation of EPSNG 8.x server, then those custom ports need to be whitelisted.