Help Center/ Host Security Service/ User Guide (Paris)/ FAQs/ Agent FAQs/ What Addresses Do ECSs Access After the Agent Is Installed?

Updated on 2024-08-14 GMT+08:00

View PDF

What Addresses Do ECSs Access After the Agent Is Installed?

Table 1 describes the devices, IP addresses, and ports that ECSs usually access after the agent is installed.

**Table 1** IP addresses description
Source Device	Source IP	Source Port	Destination Device	Target IP	Destination Port (Listening)	Protocol	Access Description	Remarks
HSS Agent	Management IP address of the agent	Random	HSS server	HSS server-IP1 HSS server-IP2	10180	TCP	The HSS agent can access HSS server nodes to obtain policies, configurations, and instructions delivered by the server, download agent software packages, upgrade packages, and signature databases, report alarm events, asset fingerprint databases, and baseline check results, and upload suspicious executable program files with user authorization.	The IP address of the HSS server in each region is different. The agent accesses each IP address using a domain name. For details about the domain name of each region, see the installation commands in "Agent Installation Guide".
HSS Agent	Management IP address of the agent	Random	Metadata service node	IP address of the metadata service node	80	TCP	The HSS agent obtains the metadata information of the server where the agent is located, including the UUID, availability_zone, project_id, and enterprise_project_id of the ECS.	-