Ports
vScope uses several ports for data collection, target identification, and communication with InfraSight Labs’ support services. Ensuring these ports are open in your firewall(s) enables optimal functionality.
Accessing vScope
Section titled “Accessing vScope”- Browser Access: Default is TCP 80 (configurable during installation).
- Proxy Communication: Default is TCP 4445 (configurable if using proxies).
Target Identification: Port Scan
Section titled “Target Identification: Port Scan”vScope scans network ranges to identify accessible targets by checking common ports. You can disable this feature if needed: Disabling port scan.
Ports for Identification:
Port | Protocol | Service |
---|---|---|
22 | TCP | SSH |
80 | TCP | HTTP |
135 | TCP | RPC |
139 | TCP | NetBIOS |
443 | TCP | HTTPS |
445 | TCP | SMB |
8080 | TCP | HTTP (alternative) |
1433 | TCP | Microsoft SQL |
3306 | TCP | MySQL |
3389 | TCP | RDP |
5985 | TCP | WS-Management / PowerShell HTTP |
5986 | TCP | WS-Management / PowerShell HTTPS |
Data Collection: Probes
Section titled “Data Collection: Probes”Each probe collects data specific to its protocol or data source. You may configure custom ports as needed.
Data Source/Protocol | Default Ports |
---|---|
Amazon Web Services (AWS) | HTTPS (TCP 443, external) |
HTTP | 80, 8080, 443, 8443 |
LDAP | 389 (Plain), 636 (LDAPS), 389 & 636 (StartTLS) |
Microsoft Azure | HTTPS (TCP 443, external) |
Microsoft Hyper-V | 5985 (HTTP) / 5986 (HTTPS) |
Microsoft SQL | 1433 (default), 1434 (UDP Browser), random assigned port |
MySQL | 3306 |
NetApp API | HTTP (TCP 80) / HTTPS (TCP 443) |
SMI-S | 5988 (TCP) or 5989 (TCP, secure) |
SNMP | 161 (UDP), 10161 (UDP, secure-SNMPv3) |
SSH | 22 |
VMware ESXi & vCenter | HTTPS (TCP 443) |
WinRM | 5985 (HTTP), 5986 (HTTPS) |
WMI | 135 (TCP), random ports (49152-65535), older OS: 445 & 139 TCP, 1025-5000 for Windows XP/2003 |
For details on configuring fixed ports for WMI, refer to Setting Up a Fixed Port for WMI.
Communication with InfraSight Labs
Section titled “Communication with InfraSight Labs”vScope requires Internet access for license verification, updates, and support communication.
Service | URL | Port |
---|---|---|
License & Billing | https://account.vscope.net | TCP 443 |
Software Updates | https://dist.vscope.net (CDN) | TCP 443 |
Report Bug/Secure Upload | https://status.vscope.net | TCP 443 |
Email (if using Mailgun SMTP) | smtp.mailgun.org | TCP 587 |
For a secure connection, allow outgoing access to the above URLs and ports.