Which network ports and URLs are required for the KACE K1000 appliance to function? (111775)

Return
  • Title

    Which network ports and URLs are required for the KACE K1000 appliance to function?
  • Description

    Which network ports and URLs are required for the KACE K1000 appliance to function? In the event that you are placing your KACE K1000 appliance behind a firewall, you may need to configure it to whitelist K1000 traffic.

  • Resolution

    The following table describes expected K1000 traffic:

    Port

    Purpose

    Configurable At...

    Optional / Required

    Direction

    Protocol

     80

    User portal, admin portal, client check-in

    Security Settings

    Must be 80 and/or 443

    --> into K1000

    HTTP

    443

    SSL option for user portal, admin portal, client check-in

    Security Settings

    Must be 80 and/or 443

    --> into K1000

    HTTPS

    22

    Used to create an SSH tunnel for support

    Security Settings

    Optional

    <-- out of K1000

    SSH

    25

    SMTP (Local Exchange)

    Protocol Settings

    Optional

    <-- out of K1000

    TCP

    3306

    Access to MySQL Database

    Security Settings

    Optional

    --> into K1000

    TCP

    52230

    AMP persistent client connection

    Agent Messaging Protocol Settings

    Required

    --> into K1000

    TCP

    139/445

    Access to Samba Shares

    Security Settings

    Required for Provisioning

    --> into K1000

    SMB

    587

    SMTP (Webmail)

    Protocol Settings

    Required for hosted webmail services, such as Office 365.

    <-- out of K1000

    TCP

    110

    POP3 (Webmail)

    Protocol Settings

    Required for hosted webmail services, such as Office 365.

    <-- out of K1000

    TCP

    995

    POP3 (SSL Enabled)

    Protocol Settings

    Required for hosted webmail services, such as Office 365.

    <-- out of K1000

    TCP

    20 and 21

    Access to backup files on the appliance via FTP

    N/A

    Optional but not recommended

    --> into K1000

    FTP

    161

    SNMP Monitoring

    Security Settings

    Optional

    -->into K1000

    UDP

    23

    FTP traffic to KACE

    N/A

    Optional

    <-- out of K1000

    FTP

    139/445

    Client provisioning

    N/A

    Required on PC for Provisioning

    <-- out of K1000

    SMB

    80/

    443

    Datacenter communication to KACE, download of patches

    N/A

    required for patching and DELL updates

    <-- out of K1000

    HTTP

    22

    Enable K1000 Tether

    Tether can be turned on under Support ->Troubleshooting Tools

    Port is not configurable

    Optional

    <-- out of K1000

    SSH

    389

    LDAP

    Settings\User Authentication OR Helpdesk\Users->Import Users

    OR Reporting\Filters->LDAP Filters

    Optional

    <-- out of K1000

    LDAP

    636

    LDAPS

    Settings\User Authentication OR Helpdesk\Users->Import Users

    OR Reporting\Filters->LDAP Filters

    Optional

    <-- out of K1000

    LDAP

    URLs Required for Proper K1000 Functionality

    Below are the URLs used to update patch listings, K1000 software updates, OVAL, SCAP, Dell warranty, and Dell updates. Please whitelist these in your firewall for ports 80 and 443 (HTTP/HTTPS):

    For K1000 Functionality (required), this includes the following URLs:

    • service.kace.com
    • servicecdn.kace.com
    • www.kace.com
    • www.appdeploy.com
    • support.kace.com
    • ftp.dell.com

    For K1000 Patching Functionality (required), this includes the following URLs:

    • kace.cdn.lumension.com
    • cache.patchlinksecure.net
    • cache.lumension.com

    For Microsoft Windows content, this includes the following URLs:

    • go.microsoft.com
    • download.windowsupdate.com
    • www.download.windowsupdate.com
    • download.skype.com
    • download.microsoft.com
    • wsus.ds.download.windowsupdate.com

    For Adobe application content, this includes the following URLs:

    • ardownload.adobe.com
    • armdl.adobe.com
    • download.adobe.com
    • swupdl.adobe.com
    • www.adobe.com

    For Mozilla Firefox, this includes the following URL:

    • ftp.mozilla.org

    For Ultra VNC, this includes the following URL:

    • support1.uvnc.com

    For 7-Zip, this includes the following URL:

    • downloads.sourceforge.net

    For VideoLAN VLC, this includes the following URL:

    • download.videolan.org


Feedback submitted.

Did this article help?

[Select Rating]

Thank you for your rating!

Close

Request or Create a KB Article »

Product(s):
K1000 Systems Management Appliance
6.0.101863, 5.5.x, 5.4.76848, 5.4.76847

Topic(s):
Best Practices, Best Practices

Article History:
Created on: 8/27/2013
Last Update on: 1/29/2015