User Tools

Site Tools


infoblox_nios:firewall_rules

NIOS Firewall Rules

Threat Insight

When running Threat Insight and/or ADP on the Grid, to download the latest module updates and whitelist updates or ADP updates , the Grid Master needs to resolve and access https://ts.infoblox.com on tcp-443. You may need to configure the proxy settings in the Grid and you may need to disable TLS inspection on the proxy.

Ports

NIOS listens on TCP-8765 for SAML.

Public IP List

Full list here.

Rules

  • Grid Connection From all members to GM/GMC and vice-versa. UDP 2114 & UDP 1194.
  • Reporting All members of the Grid need to be able to talk to port TCP 9997 on the reporting server.
  • NTP GM/GMC should access NTP servers on UDP 123. Other members sync to the active GM. If you want members to configure directly to external NTP source, configure accordingly.
  • DNS All members should have access to DNS recursion unless the Grid is locked down.
  • Access System admins should access GM/GMC on TCP 443 (HTTPS).
  • Access System admins should access all members on TCP 22 (SSH).
  • Syslog should have access to UDP 514 to the syslog server.
  • Email GM/GMC should have access to TCP 25 to the email server.
  • Monitoring All members should have access to UDP 162 on SNMP monitoring server.
  • Monitoring SNMP monitoring server should have access to all members on UDP 161.

NIOS DFP to CSP

Destination address Destination Host Name Destination Port
52.119.40.100 threatdefense.bloxone.infoblox.com 53
52.119.40.100 threatdefense.bloxone.infoblox.com 443
103.80.5.100 threatdefense.bloxone.infoblox.com 443
52.119.41.100 threatdefense.infoblox.com 443
103.80.6.100 threatdefense.infoblox.com 443
3.209.116.255 ec2-3-209-116-255.compute-1.amazonaws.com 443
3.210.226.54 ec2-3-210-226-54.compute-1.amazonaws.com 443
3.212.42.44 ec2-3-212-42-44.compute-1.amazonaws.com 443
3.214.29.106 ec2-3-214-29-106.compute-1.amazonaws.com 443
3.213.214.20 ec2-3-213-214-20.compute-1.amazonaws.com 443
18.233.189.178 ec2-18-233-189-178.compute-1.amazonaws.com 443
18.209.243.220 ec2-18-209-243-220.compute-1.amazonaws.com 443
infoblox_nios/firewall_rules.txt · Last modified: by bstafford