Required Ports for Cayosoft Guardian

Cayosoft Guardian Service Separated by a Firewall from Active Directory 

When the Cayosoft Guardian Service and Active Directory resources are separated by a firewall, the following ports must be opened:

System	Type	Port*	Path	Description
Service, Domain Controller	TCP	389	IN & OUT	LDAP
Service, Domain Controller	TCP	3268	IN & OUT	LDAP
Service, Domain Controller	TCP	5985/5986	IN & OUT	WinRM (Windows Remote Management)
Service, Network file share	TCP	139/445	IN & OUT	SMB
Service	TCP	443	IN & OUT	HTTPS Connection

 

Cayosoft Guardian Web Portal 

The following ports must be open to access the Cayosoft Guardian web portal:

System	Type	Port	Path	Description
Web Portal	TCP	80/443	IN & OUT	HTTP/HTTPS Connections

 

Cayosoft Guardian Forest Recovery Agent

The following ports must be open to access Forest Recovery Agent of Cayosoft Guardian:

System	Type	Port	Path	Description
Service, Agent	TCP	5985/5986	IN & OUT	WinRM (Windows Remote Management)
Service, Agent	TCP	443	IN & OUT	HTTPS Connection
Network file share, Agent	TCP	139/445	IN & OUT	SMB

Microsoft Office 365 Verification\Authentication 

For detailed information about Microsoft Office 365 ports and addresses, see Office 365 URLs and IP address ranges article.

Azure SQL database

For consistent connectivity to SQL Database or dedicated SQL pools (formerly SQL DW) in Azure Synapse, allow network traffic to and from ALL Gateway IP addresses and Gateway IP address subnets for the region. Periodically, Microsoft retires Gateways using old hardware and migrates the traffic to new Gateways following the process outlined in Azure SQL Database traffic migration to newer Gateways.

Note: Use the Gateway IP address subnets not to be impacted by this activity in a region.

Find the list of Gateway IP addresses and Gateway IP address subnets in Gateway IP addresses.

 

Diagram