In order to install and operate Aether-based products if you have a firewall, a proxy server or other network restrictions, such as SSL/TLS inspection, you need to allow access to the URLs and ports listed below.
Communications with the server/console, with the Updates and Upgrades server and with the Collective Intelligence server
- https://*.pandasecurity.com
- Download of installers, generic uninstaller and policies
- Agent communications (registry, configuration, tasks, actions, states, etc.)
- Comunications of the protection and the Collective Intelligence
- Download of signature files for Android
http ://*.pandasecurity.com- Signature file downloads (except for Android)
- https://*.rc.pandasecurity.com
- Orion Remote Access
- https://*.windows.net
- Performance counters (CPU, memory and disk)
- Notifications every 15 minutes if real-time is not available
- https://rp.cloud.threatseeker.com
- Web Access Control
- http://*.pand.ctmail.com
- Cyren URL Filtering for Windows protection versions lower than 8.00.18.0002
- Exchange Anti-spam Protection
- https://pandasecurity.devo.com
- Access to Advanced Visualization Tool
http ://*.pandasoftware.com- Connectivity test for Windows protection versions lower than 8.00.16
Root certificates must be updated, and, additionally it is required that the endpoints can access the following URLs, regardless of the proxy settings defined centrally from the web console:
- http://*.globalsign.com
- http://*.globalsign.net
- http://*.digicert.com
- http://*.sectigo.com
For isolated environments or legacy OS devices that are unable to update root certificates, see this article.
For incoming and outgoing traffic (Antispam and URL Filtering), please allow this URL:
- http://*.ctmail.com
Necessary ports
- Port 80 (HTTP)
- Port 443 (HTTPS,
websocket ) - Port 8080 (remote access from Orion)