Port access requirements

Used for FTP connections, particularly when configured for backups.

SSH - used for remote control sessions. The firewall must be configured to allow access from the Internet to this port on the N-able N-central server.

SMTP - used for sending mail.

Used for DNS.

HTTP - used for communication between the N-able N-central and agents or probes.

N-able N-central recommends that you block all access from the internet to this port on the N-able N-central server, unless it is absolutely required. This port may be closed in a future release.

This port must also be open for outbound traffic if the N-able N-central server is monitoring HTTP services on remote managed devices.

Used by the NTP Date service which keeps the server clock synchronized. Normally using UDP (although some servers can use TCP).

Used by Agents and Probes for WMI queries to monitor various services.

Inbound from the Windows Probe to the Windows Agent.

Used by Agents and Probes for WMI queries to monitor various services.

Inbound from the Windows Probe to the Windows Agent.

HTTPS - used for communication between N-able N-central and Agents or Probes (including MSP Connect and MSP Anywhere).

Your firewall must be configured to allow access from the Internet to this port on the N-able N-central server.

This port must be open for outbound traffic if the N-able N-central server is monitoring HTTPS services on remote managed devices.

Backup Manager on endpoint devices uses Port 443 TCP outbound. It is almost always open on workstations but may be closed on servers. Used by Agents and Probes as a failover for XMPP traffic when they cannot reach N-centralon port 5280. To activate EDR the N-able N-central server needs outbound HTTPS access to port 443 and the following domains:

• *.sentinelone.net

• sis.n-able.com

• keybox.solarwindsmsp.com

Pendo allows us to provide in-UI messaging and guides when there are important changes, new features onboarding, or other critical messages that we need to tell you about. You can gain access to these important messages, and help us make important design decisions from usage data, by allowing outbound HTTPS/443 access from your N-central server to the following URLs:

Only windows agents will send data to the app.pendo.io URL.

• app.pendo.io

• cdn.pendo.io

• data.pendo.io

• pendo-io-static.storage.googleapis.com

• pendo-static*.storage.googleapis.com

Used by Agents and Probes for WMI queries to monitor various services.

Used by MSP Connect in UDP mode.

Outbound on the N-able N-central server, port 1433 is used by Report Manager for data export. On managed devices, it is also used by Agents (inbound) and Probes (out- bound) to monitor Backup Exec jobs.

Inbound from the local LAN and not the Internet.

Backup Manager will use local port 5000. If this port is unavailable, Backup Manager will detect a free port automatically (starting from 5001, 5002 and up).

Used by Agents and Probes for XMPP traffic.

Outbound access to port 5280 for Managed Devices is recommended but not required.

Backup Manager requires access to port 8014. This value cannot be modified.

Inbound from the local LAN and not the Internet.

The default port for the N-central UI.

TCP port 8443 is used for TLS (HTTPS) connections to the N-central Web UI. Your firewall may be configured to allow access from the internet to this port on the N-able N-central server, if you require Web UI access outside of the network N-central is deployed to.

You can change this port number in the N-central Administrator menu, under "Network Setup".

The Feature Flag System in N-able N-central needs to talk to mtls.api.featureflags.prd.sharedsvcs.system-monitor.com.

Used by N-able – generally during Early Access Preview and Release Candidate testing – to enable and disable features within N-able N-central.

HTTPS - used for access to the N-able N-central Administration Console (NAC). The firewall must be configured to allow access from the Internet to this port on the N-able N-central server.

N-able recommends excluding all other inbound traffic to port 10000 except from N-able Ports for Support section below.

N-able N-central Agents must be able to communicate with a Probe on the network over port 10004 in order for Probe caching of software updates to function properly.

Inbound from the local LAN and not the Internet.