Network Ports

Direct mode

Purpose	Typical listener
Relay control	TCP/443
Management / enrollment HTTPS	TCP/6099
Default Remote Service endpoint pool	TCP/6000-6098

Enterprise single-443

Purpose	Typical listener
Public management/enrollment + Relay control	TCP/443
Remote Service endpoint pool(s)	configured public ranges
Internal allocator / relay backends	loopback only

Fixed TCP uses a dedicated configured endpoint pool. The Service Object destination port is not the public endpoint port. The installer does not modify external cloud firewall, NAT, or DNS policy. Expose only the ports required by the selected deployment and configured endpoint pools.

Last modified on September 22, 2026