Port Requirements
BeyondInsight
| Function | Traffic | Port |
|---|---|---|
| Database Connectivity | Management console to SQL Server, Analytics & Reporting to SQL Server | 1433 |
| Event Collector | BeyondTrust Discovery Scanner to BeyondInsight | 21690 |
| Discovery Scanner Central Policy | BeyondTrust Discovery Scanner to the console | 443 |
| BeyondTrust Updater Enterprise | 443 | |
| Client Browser | User to BeyondInsight or Analytics & Reporting | 443 or 80 |
| Privilege Management for Desktops | Connector to web services | 443 |
U-Series Appliance
| Function | Traffic | Port |
|---|---|---|
| Database Connectivity | BeyondInsight to SQL Server, Analytics & Reporting to SQL Server | 1433 |
| Event Collector | Discovery Scanner or Endpoint Privilege Management to BeyondInsight | 21690 |
| Privilege Management for Desktops | Connector to web services | 443 |
| Discovery ScannerCentral Policy | BeyondTrustDiscovery Scanner to the console | 443 |
| Client Browser | User to BeyondInsight or Analytics & Reporting | 443 or 80 |
| Windows Passwords | Password Safe service to client | 135, 139, 445, 389 |
| UNIX, Linux, Other | Password Safe service to client | 22 |
| Database | Password Safe service to client | 1433 |
| RDP Client and Target Proxy Session Monitoring | 4489, 3389 | |
| SSH Client and Target Proxy Session Monitoring | 4422, 22 | |
| High Availability BeyondInsight | 443, 5022 | |
| Email Notifications | 25 |
Password Safe
| Function | Service | Port |
|---|---|---|
| System Discovery | ||
| User enumeration | nb-ssn, ms-ds | TCP 139, 445 |
|
Hardware enumeration WMI service running on target |
nb-ssn, ms-ds | TCP 139, 445 |
|
Software enumeration Remote registry service running on target |
nb-ssn, ms-ds | TCP 139, 445 |
| Local scan service | ms-ds | TCP 445 |
| Password Change | ||
|
Windows password change As a fallback, uses ms-ds, 445, TCP |
adsi-ldap adsi-ldaps |
TCP / UDP 389 TCP 636 / UDP 389 |
|
Windows update and restart services WMI service running on target |
wmi | TCP 135 |
|
Active Directory password change As a fallback, uses ms-ds, 445, TCP |
adsi-ldap adsi-ldaps |
TCP 135 TCP 636 / UDP 389 |
| User and computer authentication, forest-level trusts | kerberos | TCP / UDP 88 |
| UNIX, Linux, macOS | ssh | TCP 22 |
| Oracle | oracle-listener | TCP 1521 |
| Oracle RAC Database (Fast Application Notification and Fast Connect Failover events) | Oracle Notification Services (ONS) | TCP 6100, 6200 |
| Microsoft SQL Server | netlib | TCP 1433 |
| HP ILO | ssh | TCP 22 |
| Dell DRAC | ssh | TCP 22 |
| Session Management | ||
| Remote Desktop | rdp | TCP 3389 |
| SSH | ssh | TCP 22 |
| U-Series Appliance | ||
| Mail server integration | smtp | TCP 25 |
| Active Directory integration | ldap ldaps |
TCP / UDP 389 TCP 636 / UDP 389 |
| Backup | smb | TCP 445 |
| Time Protocol | ntp | UDP 123 |
| High-availability replication (pair) | sql-mirroring, https | TCP 5022, 443 |
