Firewall Ports

Enabling the firewall on the system hosting your Kaseya Server is recommended.

Kaseya performs a System Check of firewall settings on the system hosting your Kaseya Server. If the firewall is enabled, click the Fix it link to configure the firewall settings for you. The following firewall port rules are set.

Note: Similar port settings need to be set on your internet firewall.

TCP and UDP 5721

Kaseya Default Agent TCP and Kaseya Default Agent UDP are defined as members of both the Windows Firewall Inbound Rules and Outbound Rules.

These rules specify a single port number—5721 by default. This port is used for the following:

• The Kaseya agents connect inbound to the Kaseya Server on TCP port 5721.
• The firewall must allow communications back to the Kaseya agent.
• The firewall must allow connections to the Kaseya corporate sites license.kaseya.net and vsaupdate.kaseya.net.

The default 5721 port number may be changed to any other free and available port during or after Kaseya Server installation.

TCP 80 (HTTP) or TCP 443 (HTTPS)

Kaseya HTTP and Kaseya Kaseya HTTPS are defined as members of both the Windows Firewall Inbound Rules and Outbound Rules.

These rules allow port TCP 80 and TCP 443 to connect to Kaseya web pages for remote management.

Changing the Port Used by the VSA from Port 80 - See the Kaseya knowledge base.

If SQL Server is on a Separate System

TCP 1433 and UDP 1434 - If your SQL Server is on a separate system, you may have to open TCP port 1433 and UDP port 1434 on the Kaseya Server and SQL Server machines. Other ports may be required for non-default SQL Server instances.