Network accesses used

All necessary ports are already configured for the application deployed from the ISO image. Information about network accesses required by application functionality is listed in the following table.

Network accesses required by the application

Functionality

Protocol

Port

Direction

Purpose of the connection

Managing the application using the web interface.

TCP

443

Inbound

Application administrator's computer

Technical Support Mode

TCP

22

Inbound

Application administrator's computer

Interaction of cluster nodes

TCP

9045 by default (can be change during installation)

Inbound and outbound

Other cluster nodes

Inbound SMTP traffic

TCP

25

Inbound

Internal and external SMTP servers

Outbound SMTP traffic

TCP

25 by default (can be changed in the application web interface)

Outbound

Internal and external SMTP servers

DNS requests

UDP, TCP

53

Outbound

DNS server manually specified by the administrator

Connection with proxy server

TCP

8080 by default (can be changed in the application web interface)

Outbound

Proxy server

Application activation

TCP

443

Outbound

Kaspersky servers

• activation-v2.kaspersky.com

• eu.activation-v2.kaspersky.com

• americas.activation-v2.kaspersky.com

• apac.activation-v2.kaspersky.com

• china.activation-v2.kaspersky.com

• activation-v2.geo.kaspersky.com

• activate.activation-v2.kaspersky.com

Application database update

TCP

80, 443

Outbound

Kaspersky servers.

For a list of servers, see the Knowledge Base, article 6105.

KSN

TCP

443

Outbound

Kaspersky servers

• ds.kaspersky.com

• ksn-file-geo.kaspersky-labs.com

• ksn-verdict-geo.kaspersky-labs.com

• ksn-url-geo.kaspersky-labs.com

• ksn-kas-geo.kaspersky-labs.com

• ksn-a-stat-geo.kaspersky-labs.com

• ksn-info-geo.kaspersky-labs.com

• ksn-cinfo-geo.kaspersky-labs.com

• dc1.ksn.kaspersky-labs.com

• dc1-file.ksn.kaspersky-labs.com

• dc1-kas.ksn.kaspersky-labs.com

• dc1-st.ksn.kaspersky-labs.com

KPSN

TCP

443

Outbound

KPSN server

Moebius service

TCP

443

Outbound

Kaspersky servers

• moebius.kaspersky-labs.com

• moebius-new.kaspersky-labs.com

LDAP server connection

TCP

389

Outbound

Active Directory servers

Kerberos authentication in Active Directory

UDP, TCP

88

Outbound

Active Directory servers

NTLM authentication using the single sign-on technology

TCP

445 (can be changed in the application web interface)

Outbound

Active Directory servers

Synchronizing the time on the server

UDP

123

Outbound

NTP servers

KATA protection

TCP

443 by default (can be changed in the application web interface)

Outbound

KATA server

Sending application statistics over SNMP

UDP, TCP

161 by default (can be changed in application configuration files)

Inbound

Monitoring system

Forwarding of SNMP traps

UDP, TCP

162 by default (can be changed in application configuration files)

Outbound

Monitoring system

Publishing application events to a SIEM system

UDP

514 by default (can be changed in application configuration files)

Outbound

External Syslog server

Publishing application events to a SIEM system

TCP

601 by default (can be changed in application configuration files)

Outbound

External Syslog server

Page top