Port Requirements

BeyondInsight

Function Traffic Port
Database Connectivity Management console to SQL Server, Analytics & Reporting to SQL Server 1433
Event Collector BeyondTrustDiscovery Scanner to BeyondInsight 21690

Enterprise Vulnerability ManagementCentral Policy

This feature has been deprecated and will be removed from the product in a future version.
Endpoint to the console v1: 2000
v2: 443
Discovery ScannerCentral Policy BeyondTrustDiscovery Scanner to the console v1: 10001
v2: 443
Update Servers SyncIt or EUS to the BeyondTrust server 443 or 80
BeyondTrustUpdater Enterprise   443
Client Browser User to BeyondInsight or Analytics & Reporting 443 or 80
Privilege Management for Desktops Connector to web services 443

U-Series Appliance

Function Traffic Port
Database Connectivity BeyondInsight to SQL Server, Analytics & Reporting to SQL Server 1433
Event Collector Discovery Scanner or Privilege Management to BeyondInsight 21690
Mobile Agents and Privilege Management for Desktops Connector to web services 443
Update Servers SyncIt or EUS to the BeyondTrust server 443 or 80

Enterprise Vulnerability Management

This feature has been deprecated and will be removed from the product in a future version.
Endpoint to BeyondInsight v1: 2000
v2: 443
Discovery ScannerCentral Policy BeyondTrustDiscovery Scanner to the console v1: 10001
v2: 443
Update Servers SyncIt or EUS to the BeyondTrust server 443 or 80
Client Browser User to BeyondInsight or Analytics & Reporting 443 or 80
Windows Passwords Password Safe service to client 135, 139, 445, 389
UNIX, Linux, Other Password Safe service to client 22
Database Password Safe service to client 1433
RDP Client and Target Proxy Session Monitoring   4489, 3389
SSH Client and Target Proxy Session Monitoring   4422, 22
High Availability BeyondInsight   443, 5022
Email Notifications   25
Appliance Discovery Tool   4069

Password Safe

Function Service Port Protocol
System Discovery
User enumeration nb-ssn, ms-ds 139, 445 TCP

Hardware enumeration

WMI service running on target

nb-ssn, ms-ds 139, 445 TCP

Software enumeration

Remote registry service running on target

nb-ssn, ms-ds 139, 445 TCP
Local scan services ms-ds 445 TCP
Password Change

Windows password change

As a fallback, uses ms-ds, 445, TCP

adsi-ldap 389 TCP

Windows update and restart services

WMI service running on target

wmi 135 TCP

Active Directory password change

As a fallback, uses ms-ds, 445, TCP

adsi-ldap 135 TCP
User and computer authentication, forest-level trusts kerberos 88 TCP and UDP
UNIX, Linux, macOS ssh 22 TCP
Oracle oracle-listener 1521 TCP
Microsoft SQL Server netlib 1433 TCP
HP ILO ssh 22 TCP
Dell DRAC ssh 22 TCP
Session Management
Remote Desktop rdp 3389 TCP
SSH ssh 22 TCP
U-Series Appliance
Mail server integration smtp 25 TCP
Active Directory integration ldap 389 TCP
Backup smb 445 TCP
Time Protocol ntp 123 TCP
High-availability replication (pair) sql-mirroring, https 5022, 443 TCP