If you installed the application from an RPM or DEB package, to ensure correct operation of Kaspersky Web Traffic Security you must first configure the ports on servers that have the application installed and on corporate LAN routers used for relaying traffic. If you deployed the application from an ISO image, all the ports required for operation are already configured.
Information about the required network access based on the application functionality is presented in the table below.
Network access required for operation of the application
Functionality |
Distribution kit |
Protocol |
Port |
Direction |
Connection destination |
---|---|---|---|---|---|
Managing the application through the web interface |
RPM/DEB package, ISO image |
TCP |
443 |
Inbound |
Application administrator's computer |
ISO image |
TCP |
22 |
Inbound |
Application administrator's computer |
|
RPM/DEB package, ISO image |
TCP |
9045 by default (can be changed in the application web interface) |
Inbound and outbound |
Other cluster nodes |
|
RPM/DEB package, ISO image |
TCP |
1344 by default (can be changed in the application web interface) |
Inbound |
ICAP clients and load balancers |
|
DNS requests |
RPM/DEB package, ISO image |
UDP |
53 |
Outbound |
DNS servers |
RPM/DEB package, ISO image |
TCP |
8080 by default (can be changed in the application web interface) |
Outbound |
External proxy server |
|
RPM/DEB package, ISO image |
TCP |
443 |
Outbound |
Kaspersky servers |
|
RPM/DEB package, ISO image |
TCP |
80, 443 |
Outbound |
Kaspersky servers |
|
RPM/DEB package, ISO image |
TCP |
443 |
Outbound |
Kaspersky servers |
|
RPM/DEB package, ISO image |
TCP |
443 |
Outbound |
KPSN server |
|
RPM/DEB package, ISO image |
TCP |
389 |
Outbound |
Active Directory servers |
|
RPM/DEB package, ISO image |
UDP, TCP |
88 |
Outbound |
Active Directory servers |
|
RPM/DEB package, ISO image |
TCP |
445 |
Outbound |
Active Directory servers |
|
RPM/DEB package, ISO image |
TCP |
443 by default (can be changed in the application web interface) |
Outbound |
KATA server |
|
RPM/DEB package, ISO image |
TCP |
705 by default (can be changed in the application web interface) |
Outbound |
SNMP server |
|
SNMP statistics |
ISO image |
UDP, TCP |
161 |
Inbound |
External monitoring system |
ISO image |
UDP, TCP |
162 |
Outbound |
External monitoring system |
|
Internet access when using a built-in proxy server |
ISO image |
TCP |
Any |
Outbound |
Internet, intranet |
ISO image |
TCP |
3128 by default (can be changed in the application web interface) |
Inbound |
Corporate LAN computers |
|
ISO image |
TCP |
389, 636 |
Outbound |
Active Directory servers |
|
ISO image |
UDP |
123 |
Outbound |
NTP servers |