Last updated: 2026-03-31
Different discovery methods use different ports. Open only the required ports between the Remote Collector (RC) and target systems.
Restrict access to these ports using VLANs to ensure that only RCs can communicate with target systems and don't allow unrestricted access from all systems.
Agent-based discovery does not require these ports to be opened. Agents only need to communicate with the Remote Collector and do not need direct communication with the cloud. Direct cloud communication is optional but using an RC is recommended for controlled environments.
The following table provides a complete reference of ports that may be used to access target systems during discovery, including their direction of communication.
| Source | Default Port | Protocol | Directionality | Reason |
| Remote Collector(s) (RC) | 53 (TCP) | DNS | RC to targets | DNS Zone Discovery |
| Remote Collector(s) (RC) | 623 (UDP) | IPMI | RC to targets | IPMI based discovery of management interfaces |
| Remote Collector(s) (RC) | 22 (TCP) | SSH | RC to targets | SSH based discovery of Linux and Unix systems |
| Remote Collector(s) (RC) | 161 (UDP) | SNMP | RC to targets | SNMP discovery of network equipment and connections, and any management interfaces |
| Remote Collector(s) (RC) | 443 (TCP) | APIs<br>SMIS | RC to targets | Hypervisor, Cloud and Cisco ACI/UCS Discovery |
| Remote Collector(s) (RC) | 80/443 (TCP)<br>5988/5989 (TCP) | APIs | RC to targets | Storage Discovery |
| Windows Discovery Service (WDS) | 443 (TCP) | HTTPS | WDS to RC | Connection from WDS to Remote Collector |
| Windows Discovery Service (WDS) | 135 (TCP)<br>137 (UDP)<br>139 (TCP)<br>445 (TCP)<br>1024-65535 (TCP) | WMI | WDS to targets | WMI based discovery of Windows infrastructure |
| Windows Discovery Service (WDS) | 5985 (TCP)<br>5986 (TCP) | WinRM | WDS to targets | WinRM discovery of Windows infrastructure |