Fully Qualified Domain Name Allowlisting
The table below lists the ports and endpoints that must be allowlisted in order for IoT devices to connect to PackNet for customer whose firewall infrastructure requires explicit hostnames.
URL | Description | Infrastructure | Port |
|---|---|---|---|
prod1.packnet.app | PackNet Software Platform (Multi-Region) | Multi-Region | 443 |
fd-SaaS-Prod.azurefd.net | PackNet Software Platform (Legacy) | Legacy | 443 |
signalr.prod1.packnet.app | SignalR real-time web functionality (Multi-Region) | Multi-Region | 443 |
sigr-saas-prod-p1.service.signalr.net | SignalR real-time web functionality (Legacy) | Legacy | 443 |
packsize.okta.com | PackNet Authentication Redirect | Both | 443 |
ok2static.oktacdn.com | PackNet Authentication Redirect (Europe) | Both | 443 |
packnet-prod.us.auth0.com | PackNet Authentication Redirect | Both | 443 |
api.prod1.packnet.app | PackNet API Host - required to access APIs on the site (Multi-Region) | Multi-Region | 443 |
apim-saas-prod-p1.azure-api.net | PackNet API Host - required to access APIs on the site (Legacy) | Legacy | 443 |
docs.packnet.app | PackNet Documentation | Both | 443 |
mcr.microsoft.com | Microsoft Container Registry | Both | 443 |
global.fe.mscr.io | Microsoft Container Registry Data Endpoint | Both | 443 |
mcr-global.trafficmanager.net | Microsoft Traffic Manager Endpoint | Both | 443 |
mcrwus0.cdn.mscr.io | Microsoft region Specific End Points (West US) | Both | 443 |
centralus.data.mcr.microsoft.com | Microsoft region Specific End Points (Central US) | Both | 443 |
westcentralus.data.mcr.microsoft.com | Microsoft region Specific End Points (West Central US) | Both | 443 |
westus.data.mcr.microsoft.com | Microsoft region Specific End Points (West US) | Both | 443 |
westus2.data.mcr.microsoft.com | Microsoft region Specific End Points (West US 2) | Both | 443 |
eastus.data.mcr.microsoft.com | Microsoft region Specific End Points (East US) | Both | 443 |
eastus2.data.mcr.microsoft.com | Microsoft region Specific End Points (East US 2) | Both | 443 |
packsizerd.westus2.data.azurecr.io | Packsize Data Endpoint for Azure Container Register (ACR) | Both | 443 |
packsizerd.azurecr.io | Packsize Rest Endpoint for Azure Container Register (ACR) | Both | 443 |
global.azure-devices-provisioning.net | IoT Device Provisioning Service (DPS) | Both | 443 |
iot-SaaS-Prod-1.azure-devices.net | IoT Hub Access | Legacy | 443, 5671, 8883 |
iot-hub-pr1-eu2.azure-devices.net | IoT Hub Access - East US 2 | Multi-Region | 443, 5671, 8883 |
iot-hub-pr1-cus.azure-devices.net | IoT Hub Access - Central US | Multi-Region | 443, 5671, 8883 |
8.8.8.8 | Google DNS Server; when DNS isn't explicitly provided via DHCP or static, the IoT defaults to Google DNS and requires outbound access to 8.8.8.8 | Both | 53 |
time.nist.gov | Default NTP Server for Packsize Configured VLAN, or customer can provide their own NTP Server | Both | 123 |
Packsize.BeyondTrustCloud.com | BeyondTrust Remote Support Client | Both | 443 |
dc.applicationinsights.azure.com | Application Insights Telemetry | Both | 443 |
dc.applicationinsights.microsoft.com | Application Insights Telemetry | Both | 443 |
dc.services.visualstudio.com | Application Insights Telemetry | Both | 443 |
live.applicationinsights.azure.com | Application Insights Live Metrics | Both | 443 |
rt.applicationinsights.microsoft.com | Application Insights Live Metrics | Both | 443 |
rt.services.visualstudio.com | Application Insights Live Metrics | Both | 443 |
eastus2.in.applicationinsights.azure.com | Application Insights Telemetry | Both | 443 |
eastus2.livediagnostics.monitor.azure.com | Application Insights Live Metrics | Both | 443 |
centralus.in.applicationinsights.azure.com | Application Insights Telemetry | Multi-Region | 443 |
centralus.livediagnostics.monitor.azure.com | Application Insights Live Metrics | Multi-Region | 443 |
For more information on Azure Monitor endpoint access and firewall configuration, see Outgoing ports.