topic Re: OneAgent firewall rules (SaaS deployment) in Open Q&A

OneAgent firewall rules (SaaS deployment)

kalle_lahtinen — Wed, 10 Oct 2018 18:45:42 GMT

Hi,

The OneAgent installation documentation states:

"All hosts that are to be monitored need to be able to send data to the Dynatrace cluster."

I wish this was a bit more accurate... Can I open the outgoing ports 443 and 8443 towards a specific name or subnet, or do I need to allow it for all destinations?

Br,

Kalle

Re: OneAgent firewall rules (SaaS deployment)

JamesKitson — Wed, 10 Oct 2018 18:53:55 GMT

In the installer screens that are specific for your environment it will tell exactly which IP addresses need to be be reachable:

Re: OneAgent firewall rules (SaaS deployment)

kalle_lahtinen — Wed, 10 Oct 2018 19:12:15 GMT

Alright, so it varies case by case and that's why it wasn't documented more precisely. Fair enough, thanks for the response!

Re: OneAgent firewall rules (SaaS deployment)

jaroslaw_orlows — Thu, 11 Oct 2018 07:06:33 GMT

anonymous user, thanks for finding this. I think we can still do a better job explaining this. Since we already mention this requirement, we can also provide a quick hint where to get addresses for the whitelist from. Will add it the doc. Thanks!

Re: OneAgent firewall rules (SaaS deployment)

vivek_vasukutta — Mon, 06 May 2019 17:00:05 GMT

What is the port number?

Re: OneAgent firewall rules (SaaS deployment)

Iplinsky — Fri, 23 Jun 2023 20:24:45 GMT

The following ports:

9999 for activegate (InBound)

443/8443 for OneAgent (Outbound)

Re: OneAgent firewall rules (SaaS deployment)

Walle — Tue, 02 Sep 2025 07:59:31 GMT

Hi,

So we have the target IPs.

How about the ports?

Thanks a lot

Re: OneAgent firewall rules (SaaS deployment)

Julius_Loman — Tue, 02 Sep 2025 19:40:25 GMT

@Walle Connectivity to Dynatrace SaaS endpoints is always on port 443/tcp - standard https port.