The system running our PRTG core server does not have full internet access. Which URLs do I need to make available to the PRTG core server so I can use the auto-update functionality and automatic software activation? Are there sensor types that connect to external sources?
Which servers does PRTG connect to for software auto-update, activation, etc.?
Votes:
1
4 Replies
Votes:
3
This article applies as of PRTG 24
PRTG connections to external servers
PRTG needs to connect to several external servers for full functionality. These connections are required for several purposes, such as PRTG updates and licensing, for notifications, and for monitoring with certain sensor types.
See the table below for external servers that PRTG tries to reach, depending on your PRTG usage.
Auto-update
To use auto-update, the PRTG core server system needs internet access (either directly or via proxy) to different (sub)domains so that update checks and downloads can work correctly:
(Sub)domain | Protocol | Port | Remarks |
---|---|---|---|
autoupdate.paessler.com | https | 443 | Hosted on Cloudflare |
updatecheck.paessler.com | https | 443 | Hosted on Cloudflare |
downloads.paessler.com | Hosted on Cloudflare |
Note: Because the other IP addresses can change dynamically, we do not recommend that you apply policies based on them. We cannot provide IP addresses for Amazon servers. Here you can find information on Cloudflare IP ranges.
License activation
Software activation is a one-time process that is necessary for all installations that run with a license key. PRTG tries to automatically activate every installation on first startup. Afterward, it periodically connects at least every 7 days and receives updates on the license, for example, the remaining maintenance days.
For all of this to work, the PRTG core server system needs internet access (either directly or via proxy) to at least one of the following (sub)domains:
(Sub)domain | Protocol | Port | Remarks |
---|---|---|---|
activation.paessler.com | https | 443 | Hosted on Cloudflare |
activation1.paessler.com | https | 443 | Hosted on Cloudflare |
activation1.paessler.ag | https | 443 | Hosted on Cloudflare |
activation1.paessler.eu | https | 443 | Hosted on Cloudflare |
Note: Here you can find information on Cloudflare IP ranges.
Important: The following information only apply to the activation of Paessler PRTG Enterprise Monitor and as of PRTG 21.4.73.
(Sub)domain | Protocol | Port # | Remarks |
---|---|---|---|
services.paessler.com | https | 443 | IP addresses: • 2606:4700::6810:cd1e • 2606:4700::6810:cc1e • 104.16.204.30 • 104.16.205.30 |
Note: Because the IP addresses can change dynamically, we do not recommend that you apply policies based on them.
HTML emails
When you receive emails from PRTG that are created via the default HTML email templates, your email client may try to connect to the Paessler server to download images (for example, sensor icons). To be able to view these emails properly, allow your email client to get the images from our server.
(Sub)domain | Protocol | Port |
---|---|---|
prtgicons.paessler.com | https | 443 |
Emails from Paessler directly come from mailserver.paessler.com with the IP address 62.146.75.210.
Sensors
Several sensor types need to connect to external servers to show monitoring data. Make sure that the probe system(s) on which you run such sensors can reach the target domains.
External source | Sensors and remarks |
---|---|
*.amazonaws.com | Amazon CloudWatch sensors: The first part of the domain depends on your region and configuration. |
https://api.prtgcloud.com:443 | Cloud HTTP v2 and Cloud Ping v2 sensors |
http://windowsupdate.microsoft.com and other Windows update domains | Windows Updates Status (PowerShell) sensor (if WSUS is not available) |
Automatic Root Certificates Updates (via Akamai CDN) | SSL-secured sensor connections (see Why is there strange traffic on a probe when monitoring ESX hosts?) |
DNS servers | DNS resolution for several sensor types (see How DNS query works on Microsoft TechNet) |
https://manage.office.com/api/v1.0/ | Microsoft 365 Service Status sensor |
Notifications
External source | Notification type |
---|---|
*.amazonaws.com | Amazon SNS notification: The first part of the domain depends on your region and configuration. |
https://api.prtgcloud.com:443 | Push notification |
SMS notifications
See this article for the URLs that PRTG uses for the preconfigured SMS providers:
Geo Maps
See this article for the URLs that PRTG uses for the geographical maps providers:
Support bundles
You can send support requests and support bundles via the Contact Support form in PRTG. PRTG will securely transmit these requests to Paessler via the PRTG Cloud. Make sure that your PRTG core server has access to the internet and can reach the following URLs:
Domain | Protocol | Port | URL |
---|---|---|---|
api.prtgcloud.com | https | 443 | https://api.prtgcloud.com:443 |
amazonaws.com | *.s3.amazonaws.com |
Other
(Sub)domain | Protocol | Port | Usage |
---|---|---|---|
activation1.paessler.com | https | 443 | Login page RSS Feed |
www.paessler.com | https | 443 | Login page RSS Feed |
More
Created on Feb 21, 2012 11:16:01 AM by
Daniel Zobel [Product Manager]
Last change on Oct 31, 2024 8:31:02 AM by
Fruzsina Ébelle [Paessler Support]
Votes:
0
Would it be possible to provide a range of IP addresses/subnets of the above-mentioned servers? Applying policy based on domain names and a subsequent resolution has a severe impact on our enterprise firewall performance.
Thanks,
Martin Klepac
Votes:
0
Hi PRTG
It looks lake this FQDN is also used 3.base.maps.api.here.com
/Johan
Votes:
0
Hello JohanLysen,
thank you for your reply and input.
Please note that there's a dedicated article for the URL's used by Geo-Maps, please refer to:
Best Regards,
Luciano Lingnau [Paessler Support]
Add comment