{"id":80322,"date":"2023-06-05T13:09:57","date_gmt":"2023-06-05T17:09:57","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=80322"},"modified":"2024-06-11T14:18:16","modified_gmt":"2024-06-11T18:18:16","slug":"agent-networking-and-port-requirements","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements","title":{"rendered":"JumpCloud Agent Networking and Port Requirements"},"content":{"rendered":"\n<p>The agent does not listen on any port for traffic initiated external to the localhost, thus does not increase potential attack vectors. However, as outbound connections are made, any egress filtering performed by Antivirus software, firewalls, routers, etc.. would need to be opened. No inbound TCP connections need to be explicitly defined.<\/p>\n\n\n\n<p>Environments using DNS proxies, or other mechanisms that may cache JumpCloud IP addresses may pin themselves to a single server. For larger environments, this could result in rate limiting which will disrupt installations and functionality. Caching JumpCloud IPs is not recommended.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Clients downloading the agent installer need to use TLS 1.2 or higher. Any clients (browsers, curl, PowerShell, etc.) may need to be updated or explicitly told to use TLS 1.2 or higher in order to successfully download the agent installer.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>The JumpCloud agent accesses the following servers and ports:<\/p>\n\n\n\n<ul>\n<li>a1hrq03pdcca60-ats.iot.us-east-1.amazonaws.com:443<\/li>\n\n\n\n<li>agent.jumpcloud.com:443<\/li>\n\n\n\n<li>assist.jumpcloud.com:443 &#8211; used by Remote Assist agent<\/li>\n\n\n\n<li>cdn02.jumpcloud.com:443<\/li>\n\n\n\n<li>chocolatey.org:443 (<a href=\"https:\/\/chocolatey.org\/api\/v2\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/chocolatey.org\/api\/v2\/<\/a>)<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Chocolatey packages may download other files &#8211; mainly installers &#8211; from the software vendor of the package. Servers and ports accessed will vary depending on the Chocolatey software packages configured. See <a href=\"https:\/\/jumpcloud.com\/support\/software-management-windows\" target=\"_blank\" rel=\"noreferrer noopener\">Software Management: Windows<\/a> for more information.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ul>\n<li>console.jumpcloud.com:443<\/li>\n\n\n\n<li>kickstart.jumpcloud.com:443<\/li>\n\n\n\n<li>private-kickstart.jumpcloud.com:443<\/li>\n\n\n\n<li>*.pwm.jumpcloud.com:443 &#8211; used by JumpCloud Password Manager\n<ul>\n<li>In addition, these are the URLs used by Password Manager if needed for defining IPs in firewalls:\n<ul>\n<li>cdn.pwm.jumpcloud.com<\/li>\n\n\n\n<li>devices.pwm.jumpcloud.com<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>s3.amazonaws.com:443<\/li>\n\n\n\n<li>pool.ntp.org:123 (UDP)*<\/li>\n<\/ul>\n\n\n\n<p>*Time synchronization is necessary for the installation and proper function of the agent; as this can be accomplished on an internal network, access to an external host on port 123 is not necessarily required.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<ul>\n<li>For more information on port and networking requirements specific to Remote Assist features, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/understand-remote-assist-agent#firewall-exclusions\" target=\"_blank\" rel=\"noreferrer noopener\">Understand the Remote Assist Agent<\/a>. <\/li>\n\n\n\n<li>For scripts you can use to test connectivity, see <a href=\"https:\/\/jumpcloud.com\/support\/troubleshoot-remote-assist-connectivity-mac-and-windows\" target=\"_blank\" rel=\"noreferrer noopener\">Troubleshoot: Remote Assist End-User Connectivity on Windows and macOS<\/a>.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Proxy Support<\/h2>\n\n\n\n<p>For installation, Linux (initd) and Mac support routing through an https proxy. Use the following commands to set a proxy server for the installer, then run the installer normally.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Linux<\/h3>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>echo &#8220;http:\/\/PROXY_SERVER_IP:PROXY_SERVER_PORT&#8221; &gt; \/etc\/jcagent-proxy.conf<br>export https_proxy=&#8221;<code>cat \/etc\/jcagent-proxy.conf<\/code>&#8220;<\/p>\n<\/div><\/div>\n\n\n\n<p>Proxy usage for pre and post-installation on Linux using systemd is supported using an alternative method:<\/p>\n\n\n\n<ol>\n<li>Create a folder <strong>\/etc\/systemd\/system\/jcagent.service.d\/<\/strong>.<\/li>\n\n\n\n<li>Create a file <strong>override.conf<\/strong> in the above folder.<\/li>\n\n\n\n<li>Add to the file:<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>[Service]<br>Environment=HTTP_PROXY=http:\/\/proxy_ip:port\/<br>HTTPS_PROXY=http:\/\/proxy_ip:port\/<\/p>\n<\/div><\/div>\n\n\n\n<ol start=\"4\">\n<li>In the bash session where the installer will run, set environment variables and run the install command:<\/li>\n<\/ol>\n\n\n\n<p><\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p># export http_proxy=http:\/\/proxy_ip:port\/<br># export https_proxy=$http_proxy<br># curl &#8211;silent &#8211;show-error &#8211;header &#8216;x-connect-key: YOUR_CONNECT_KEY&#8217; https:\/\/kickstart.jumpcloud.com\/Kickstart | sudo bash<\/p>\n<\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Mac<\/h3>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>echo &#8220;http:\/\/PROXY_SERVER_IP:PROXY_SERVER_PORT&#8221; &gt; \/etc\/jcagent-proxy.conf<\/p>\n<\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Windows:<\/h3>\n\n\n\n<p>At an administrator command prompt, run:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>echo &#8220;http:\/\/PROXY_SERVER_IP:PROXY_SERVER_PORT&#8221; &gt; c:\\windows\\system32\\drivers\\etc\\jcagent-proxy.conf<\/p>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>The agent does not listen on any port for traffic initiated external to the localhost, thus does not increase potential [&hellip;]<\/p>\n","protected":false},"author":206,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2923,2852],"support_tag":[],"coauthors":[2842],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>JumpCloud Agent Networking and Port Requirements - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn about JumpCloud&#039;s Agent Networking and Port Requirements.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"JumpCloud Agent Networking and Port Requirements\" \/>\n<meta property=\"og:description\" content=\"Learn about JumpCloud&#039;s Agent Networking and Port Requirements.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-11T18:18:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"pamkellman\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements\",\"url\":\"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements\",\"name\":\"JumpCloud Agent Networking and Port Requirements - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:09:57+00:00\",\"dateModified\":\"2024-06-11T18:18:16+00:00\",\"description\":\"Learn about JumpCloud's Agent Networking and Port Requirements.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"JumpCloud Agent Networking and Port Requirements\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"JumpCloud Agent Networking and Port Requirements - JumpCloud","description":"Learn about JumpCloud's Agent Networking and Port Requirements.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements","og_locale":"en_US","og_type":"article","og_title":"JumpCloud Agent Networking and Port Requirements","og_description":"Learn about JumpCloud's Agent Networking and Port Requirements.","og_url":"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements","og_site_name":"JumpCloud","article_modified_time":"2024-06-11T18:18:16+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"pamkellman"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements","url":"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements","name":"JumpCloud Agent Networking and Port Requirements - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:09:57+00:00","dateModified":"2024-06-11T18:18:16+00:00","description":"Learn about JumpCloud's Agent Networking and Port Requirements.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/agent-networking-and-port-requirements#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"JumpCloud Agent Networking and Port Requirements"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/80322"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/206"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/80322\/revisions"}],"predecessor-version":[{"id":111378,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/80322\/revisions\/111378"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=80322"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=80322"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=80322"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=80322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}