Required ports for Cayosoft Guardian

Cayosoft Guardian Service separated by a firewall from Active Directory 

If the Cayosoft Guardian Service and Active Directory resources are separated by a firewall, the following ports must be opened.

System	Type	Port*	Path	Description
Service, Domain Controller	TCP	389	IN & OUT	LDAP
Service, Domain Controller	TCP	3268	IN & OUT	LDAP
Service, Domain Controller	TCP	5985/5986	IN & OUT	WinRM (Windows Remote Management)
Service, Network file share	TCP	139/445	IN & OUT	SMB
Service	TCP	443	IN & OUT	HTTPS Connection

 

Cayosoft Guardian Web Portal 

The following ports must be open to access Cayosoft Guardian Web Portal.

System	Type	Port	Path	Description
Web Portal	TCP	80/443	IN & OUT	HTTP/HTTPS Connections

 

Cayosoft Guardian Forest Recovery Agent

System	Type	Port	Path	Description
Service, Agent	TCP	5985/5986	IN & OUT	WinRM (Windows Remote Management)
Service, Agent	TCP	443	IN & OUT	HTTPS Connection
Network file share, Agent	TCP	139/445	IN & OUT	SMB

Microsoft Office 365 Verification\Authentication 

For detailed information about Microsoft Office 365 ports and addresses, please see Office 365 URLs and IP address ranges article.

Azure SQL database

For consistent connectivity to SQL Database or dedicated SQL pools (formerly SQL DW) in Azure Synapse, allow network traffic to and from ALL Gateway IP addresses and Gateway IP address subnets for the region. Periodically, Microsoft retires Gateways using old hardware and migrate the traffic to new Gateways as per the process outlined at Azure SQL Database traffic migration to newer Gateways. Use the Gateway IP address subnets in order to not be impacted by this activity in a region.

Find actual list of Gateway IP addresses and Gateway IP address subnets in this article.

 

Diagram