AutomoxAutomox

Linux Agent firewall requirements...

MRaybone
April 19, 2022 at 3:18 pm UTC
#agent#automox#linux

Hello,

So the requirements on what to allow outbound through our firewall for Windows agents (for WindowsUpdate) are very clear.  But what do we need to allow for Linux agents?  Or does all of that come via Automox’s cloud CDN?

Cheers,
Mark.

This discussion is archived and closed to replies. Continue it in the Automox Community Slack.

Discuss on Slack

Replies (4)

ElmerP-AutomoxApril 22, 2022
#1

Hello Mark,

The following outbound connectivity is required by the Automox Agent:

Agent access to the Automox platform on 443/tcp (https), and some third-party patches:

  • api.automox.com

Agent access to content uploaded on 443/tcp (https) for use with Worklets and Required Software Policies:

  • automox-policy-files.s3.us-west-2.amazonaws.com

Device access to Linux distro-specific yum or apt repositories, depending on your device’s configuration present in /etc/yum.repos.d/ or /etc/apt/sources.list.d/, such as:

  • Ubuntu: us.archive.ubuntu.com, security.ubuntu.com
  • CentOS: vault.centos.org, mirrorlist.centos.org

Hope this helps.

Kind regards,

Elmer Pallarca

Sr. Customer Success Engineer

Automox

(ref. https://support.automox.com/help/agent-firewall-allowlisting-rules)

MRayboneMay 3, 2022
#2

Hello!

Thanks for the reply.  Are you saying that for Automox to patch a Linux (Ubuntu in our case) device, it will also need the Ubuntu apt repositories whitelisted on the firewall?

Cheers,
Mark.

ElmerP-AutomoxMay 3, 2022
#3

Hello Mark,

Yes - the Ubuntu device does need to be able to directly connect to the Ubuntu apt repositories to pull down patches/packages.

Kind regards,

Elmer

MRayboneMay 3, 2022
#4

Amazing, thanks for the quick reply!