Contents
Important Note
Before you deploy BloxOne services and on-prem hosts, ensure that you prepare your environment according to the requirements for the supported platforms and open all necessary ports for unrestricted outbound access.
Port Usage for Firewall
The following table lists the ports that must be available in your firewall for the BloxOne on-prem hosts to function properly.
| IP Protocol | Port | Services that use this port | Destination | Description | IPs and URLs (if applicable) |
|---|---|---|---|---|---|
| TCP & UDP | 53 |
| csp.infoblox.com | For the Cloud Services Portal connectivity to work as desired, TCP and UDP 53 ports are used as the outbound port to the complete list of cloud addresses. | N/A |
| UDP | 67 |
| N/A | For DHCP service | N/A |
| UDP | 68 |
| DHCP clients | From DHCP server to DHCP clients | N/A |
| TCP | 80 |
| N/A | For redirect purposes | Default redirect IP: 52.4.105.248 |
| UDP | 123 |
|
|
| N/A |
| TCP | 443 |
| N/A | For redirect purposes | Default redirect IP: 52.4.105.248 |
| TCP | 443 |
|
|
| N/A |
| TCP | 443 |
|
Note: Communication with these destinations will bypass any proxy server setting. In other words, if you configure a proxy, the BloxOne DDI service destination (dns.bloxone.infoblox.com:443) is bypassed on the proxy. Similarly, the DNS forwarding proxy service (threatdefense.bloxone.infoblox.com:443) is bypassed on the proxy. |
| For BloxOne Threat Defense Cloud DNS Server:
|
| TCP | 647 |
|
This is an incoming port for the HA (High Availability) feature. The receiving peer must be able to receive traffic on the port, and the sending peer must be able to send traffic to the port, generally from other random ports. | For DHCP and DHCP HA (High Availability) | N/A |
| UDP | 647 |
|
This is an incoming port for the HA (High Availability) feature. The receiving peer must be able to receive traffic on the port, and the sending peer must be able to send traffic to the port, generally from other random ports. | For DHCP clustering load balancing | N/A |
| TCP | 847 |
|
This is an incoming port for the HA (High Availability) feature. The receiving peer must be able to receive traffic on the port, and the sending peer must be able to send traffic to the port, generally from other random ports. | For DHCP clustering | N/A |
Note
For additional information on BloxOne connectivity service requirements, see the following:
- Minimum System Requirements for On-Prem Hosts
- Supported Platforms for On-Prem Hosts
- Port Usage for Bare-Metal On-Prem Hosts
This page has no comments.