Port Requirements

BeyondInsight

Function Traffic Port
Database Connectivity Management console to SQL Server, Analytics & Reporting to SQL Server 1433
Event Collector BeyondTrustDiscovery Scanner to BeyondInsight 21690

Enterprise Vulnerability ManagementCentral Policy

This feature has been deprecated and will be removed from the product in a future version.
Endpoint to the console v1: 2000
v2: 443
Discovery ScannerCentral Policy BeyondTrustDiscovery Scanner to the console v1: 10001
v2: 443
Update Servers SyncIt or EUS to the BeyondTrust server 443 or 80
BeyondTrustUpdater Enterprise   443
Client Browser User to BeyondInsight or Analytics & Reporting 443 or 80
Privilege Management for Desktops Connector to web services 443

U-Series Appliance

Function Traffic Port
Database Connectivity BeyondInsight to SQL Server, Analytics & Reporting to SQL Server 1433
Event Collector Discovery Scanner or Privilege Management to BeyondInsight 21690
Mobile Agents and Privilege Management for Desktops Connector to web services 443
Update Servers SyncIt or EUS to the BeyondTrust server 443 or 80

Enterprise Vulnerability Management

This feature has been deprecated and will be removed from the product in a future version.
Endpoint to BeyondInsight v1: 2000
v2: 443
Discovery ScannerCentral Policy BeyondTrustDiscovery Scanner to the console v1: 10001
v2: 443
Update Servers SyncIt or EUS to the BeyondTrust server 443 or 80
Client Browser User to BeyondInsight or Analytics & Reporting 443 or 80
Windows Passwords Password Safe service to client 135, 139, 445, 389
UNIX, Linux, Other Password Safe service to client 22
Database Password Safe service to client 1433
RDP Client and Target Proxy Session Monitoring   4489, 3389
SSH Client and Target Proxy Session Monitoring   4422, 22
High Availability BeyondInsight   443, 5022
Email Notifications   25
Appliance Discovery Tool   4069

Password Safe

Function Service Port
System Discovery
User enumeration nb-ssn, ms-ds TCP 139, 445

Hardware enumeration

WMI service running on target

nb-ssn, ms-ds TCP 139, 445

Software enumeration

Remote registry service running on target

nb-ssn, ms-ds TCP 139, 445
Local scan services ms-ds TCP 445
Password Change

Windows password change

As a fallback, uses ms-ds, 445, TCP

adsi-ldap
adsi-ldaps
TCP / UDP 389
TCP 636 / UDP 389

Windows update and restart services

WMI service running on target

wmi TCP 135

Active Directory password change

As a fallback, uses ms-ds, 445, TCP

adsi-ldap
adsi-ldaps
TCP 135
TCP 636 / UDP 389
User and computer authentication, forest-level trusts kerberos TCP / UDP 88
UNIX, Linux, macOS ssh TCP 22
Oracle oracle-listener TCP 1521
Microsoft SQL Server netlib TCP 1433
HP ILO ssh TCP 22
Dell DRAC ssh TCP 22
Session Management
Remote Desktop rdp TCP 3389
SSH ssh TCP 22
U-Series Appliance
Mail server integration smtp TCP 25
Active Directory integration ldap
ldaps
TCP / UDP 389
TCP 636 / UDP 389
Backup smb TCP 445
Time Protocol ntp UDP 123
High-availability replication (pair) sql-mirroring, https TCP 5022, 443