The system running our PRTG core server does not have full internet access. Which URLs do I need to make available to the PRTG core server so I can use the auto-update functionality and automatic software activation? Are there sensor types that connect to external sources?
Which servers does PRTG connect to for software auto-update, activation, etc.?
This article applies as of PRTG 22
PRTG connections to external servers
PRTG needs to connect to several external servers for full functionality. These connections are required for several purposes, such as PRTG updates and licensing, for notifications, and for monitoring with certain sensor types.
See the table below for external servers that PRTG tries to reach, depending on your PRTG usage.
To use auto-update, the PRTG core server system needs internet access (either directly or via proxy) to different (sub)domains so that update checks and downloads can work correctly:
|autoupdate.paessler.com||https||443||Hosted on Cloudflare|
|updatecheck.paessler.com||https||443||Hosted on Cloudflare|
|downloads.paessler.com||Hosted on Cloudflare|
Note: Because the other IP addresses can change dynamically, we do not recommend that you apply policies based on them. We cannot provide IP addresses for Amazon servers.
Software activation is a one-time process that is necessary for all installations that run with a license key. PRTG tries to automatically activate every installation on first startup. Afterward, it periodically connects at least every 7 days and receives updates on the license, for example, the remaining maintenance days.
For all of this to work, the PRTG core server system needs internet access (either directly or via proxy) to at least one of the following (sub)domains:
Important: We are currently (Q4, 2022) updating our backend infrastructure. This affects the (sub)domains below. After the update of each sub(domains) is finished, the IP address 126.96.36.199 is no longer valid. All (sub)domains will be resolved to Cloudflare’s current IP ranges.
|activation.paessler.com||https||443||Hosted on Cloudflare|
|activation1.paessler.com||https||443||Hosted on Cloudflare|
(deprecation planned for 2023)
(deprecation planned for 2023
Important: The following information only apply to the activation of Paessler PRTG Enterprise Monitor and as of PRTG 21.4.73.
Note: Because the IP addresses can change dynamically, we do not recommend that you apply policies based on them.
When you receive emails from PRTG that are created via the default HTML email templates, your email client may try to connect to the Paessler server to download images (for example, sensor icons). To be able to view these emails properly, allow your email client to get the images from our server.
Emails from Paessler directly come from mailserver.paessler.com with the IP address 188.8.131.52.
Several sensor types need to connect to external servers to show monitoring data. Make sure that the probe system(s) on which you run such sensors can reach the target domains.
|External source||Sensors and remarks|
|*.amazonaws.com||Amazon CloudWatch sensors: The first part of the domain depends on your region and configuration.|
|https://api.prtgcloud.com:443||Cloud HTTP and Cloud Ping sensors|
|http://windowsupdate.microsoft.com and other Windows update domains||Windows Updates Status (PowerShell) sensor (if WSUS is not available)|
|Automatic Root Certificates Updates (via Akamai CDN)||SSL-secured sensor connections (see Why is there strange traffic on a probe when monitoring ESX hosts?)|
|DNS servers||DNS resolution for several sensor types (see How DNS query works on Microsoft TechNet)|
|https://manage.office.com/api/v1.0/||Microsoft 365 Service Status sensor|
|External source||Notification type|
|*.amazonaws.com||Amazon SNS notification: The first part of the domain depends on your region and configuration.|
See this article for the URLs that PRTG uses for the preconfigured SMS providers:
See this article for the URLs that PRTG uses for the geographical maps providers:
You can send support requests and support bundles via the Contact Support form in PRTG. PRTG will securely transmit these requests to Paessler via the PRTG Cloud. Make sure that your PRTG core server has access to the internet and can reach the following URLs:
|activation1.paessler.com||https||443||Login page RSS Feed|
|www.paessler.com||https||443||Login page RSS Feed|
Would it be possible to provide a range of IP addresses/subnets of the above-mentioned servers? Applying policy based on domain names and a subsequent resolution has a severe impact on our enterprise firewall performance.
It looks lake this FQDN is also used 3.base.maps.api.here.com
thank you for your reply and input.
Please note that there's a dedicated article for the URL's used by Geo-Maps, please refer to:
Luciano Lingnau [Paessler Support]