Configuring Firewall Rules for the Synchronization Agent Server

Before installing the EDS components, make sure that the connections below are allowed in your on-premise network.

Internal Outgoing Connections

From To Protocol Port
Synchronization Agent Server All domain controllers of your on-premise Active Directory domain TCP 389 (LDAP), 3268 (Global Catalog)
TCP, UDP 88 (Kerberos)

Internal Incoming Connections

From To Protocol Port

All domain controllers of your on-premise Active Directory domain

Note: These connections must be allowed only if you need to synchronize password changes.

Synchronization Agent Server TCP, UDP 135 and dynamic port range (DCOM)

External Outgoing Connections

From To Protocol Port
Synchronization Agent Server CloudBlue Commerce External Directory Synchronization Web Service - PublicNet network TCP 443 (HTTPS)