Ports/IP Addresses Used

The ports/IP addresses used to connect with SQL Connection, Active Directory/LDAP, Scan, and Mail Server Settings are listed below.

Ports	Usage
SQL Connection
1433	Default port for SQL server connection. Impact: If the ports are blocked, the application will not start.
1434	Fetches the list of SQL server instances listed in ChangeDBServer GUI.
Active Directory/LDAP
389	For AD/LDAP user import and AD/LDAP authentication using LDAP protocol.
636	For AD/LDAP user import and AD/LDAP authentication using LDAP protocol in secure mode (SSL).
88	Authenticates members of protected user groups in AD using Kerberos protocol.
Mail Server Settings Ports mentioned below are default. You can configure other ports while setting up the feature in the application.
25	SMTP for sending emails (with TLS disabled)
465	SMTPS for sending emails (with TLS disabled)
587	SMTP for Office365, Gmail etc. (with TLS enabled)
110	POP for fetching emails
995	POPS for fetching emails
143	IMAP for fetching emails
993	IMAPS for fetching emails
443	EWS and Graph (for both Incoming & Outgoing)

Ports used during Scan

The various ports used during the scan and remote control are mentioned below,

Server

Port

Purpose

Type

Connection

8383

For communication between the agent or distribution server and the Desktop Central server.

HTTPS

In bound to server

8027

The notification server port is responsible for communicating on-demand operations from the server to the agent.

TCP

In bound to server

Tools and Remote Control

Port

Purpose

Type

Connection

8444

For Sharing remote desktops, System Manager, Chat, and transferring files

HTTP

In bound to server

8443

For Sharing Remote Desktops, System Manager, Chat, and transferring files

HTTPS/UDP (for voice & video chat)

In bound to server

Domain Scan

Port	Purpose	Type
389	Port(s) used to fetch the computers list during domain scan and users list from Active Directory	TCP

Unix Machines

VMWARE

Port	Purpose	Type
443	VMWare ESXi	HTTPS

Other Network Devices

Note: The ports - ICMP echo and ICMP echo reply, should be allowed in the firewall as it is used to ping the target machines.

Below is the list of URLs/IP addresses that need to be whitelisted for a feature to function seamlessly.

URL	IP Address	Feature	Purpose
creator.zoho.com	204.141.42.107	1. Event/Product notification 2. Product overview 3. ME Tracker	1. Fetches event and product notifications. 2. Sends contact details. 3. installation details.
securitycontact.manageengine.com	117.20.43.90	Security Alerts Non-ESM setup, Admin > Security Settings > Security Alerts ESM setup, ESM Directory > Security Settings > Security Alerts	Uploads contact details from the Security Advisory subscription mail to the creator form.
updates.manageengine.com	169.148.146.124	Auto Update Non-ESM setup, Admin > General Settings > Auto Update. ESM setup, ESM Directory > Auto Update.	Fetches security patch lists, PPM's public certificates, and downloads PPM patches.

Note: The application reaches google.com to check internet connectivity, hence whitelisting is not mandatory.

More information on ports used during asset scan is available here.