All agents use an outbound internet connection for probing traffic to targets and controller traffic to the SEI controller.
Before agent deployment, check firewall settings for outbound probing and controller traffic. Configure Outbound Firewall settings if:
| Protocol | Ports | Destination IP | Direction | Purpose |
|---|---|---|---|---|
| Probing traffic: Required for agents to complete probing sessions with targets outside of the firewall | ||||
| TCP | 80/443 | Configured HTTP(S) targets | Outbound | HTTP(S) target addresses |
| TCP | Configured Speed Test port (Default 8080) | Configured Speed Test targets | Outbound | Speed Test target addresses |
| ICMP | NA | Configured ICMP targets | Outbound |
|
| UDP | Configured UDP Port (Default 5001) | Configured UDP targets | Outbound | UDP target addresses |
| UDP | Configured UDP Port (Default 5001) for managed UDP targets and UDP port 33434 for other targets | UDP/ICMP Targets for which hop trace is enabled | Outbound | Hop tracing on Linux and Mac OS (only ICMP is used on Windows OS where the agent just executes tracert command |
| Controller traffic: Required for Agent to connect to Service Experience Insights | ||||
| TCP | 443 | *.edgelq.com | Outbound | Access to SEI controllers (HTTP2 must be supported when an HTTP proxy is configured) |
| UDP | 53 | DNS Server IP | Outbound | DNS Lookups |
| UDP | 3478, 19302 | * | Outbound | Stun server - used to determine public IP Address |
Static and Cloud Agents can be optionally configured as “managed targets” that respond to probing from other agents. This requires the agent to reply to inbound probing traffic.
| Protocol | Ports | Source IP | Direction | Purpose |
|---|---|---|---|---|
| Required for agents to respond to inbound probing from other agents | ||||
| TCP | 80/443 | * or addresses of originating agents sending inbound probing traffic | Inbound | HTTP(S) targets |
| TCP | Configured Speed Test port (Default 8080) | * or addresses of originating agents sending inbound probing traffic | Inbound | Speed Test targets |
| ICMP | N/A | * or or addresses of originating agents sending inbound probing traffic | Inbound | ICMP targets |
| UDP | Configured UDP Port (Default 5001) | * or addresses of originating agents sending inbound probing traffic | Inbound | UDP targets |
| UDP | Configured UDP Port (Default 5001) | * or addresses of originating agents sending inbound probing traffic | Inbound | Enables agent to respond to traceroute sessions from Static Agents, Cloud Agents, and Mobile Agents for macOS. Mobile Agents for Windows use ICMP to execute tracert command. |
