Network Requirements
This document covers detailed specifications of network requirements within a customer's organisation.
Outbound Network Requirements
The Activate server and its service account require outbound network connectivity to specific Microsoft and Activate endpoints. These connections are used for authentication, integration with Microsoft 365 services, and communication with Activate cloud components.
Ensure the following URLs are accessible from the Activate server:
- login.microsoftonline.com
- graph.microsoft.com
- outlook.office365.com
- graph.windows.net
- activateiam.com
Firewall or proxy rules must allow outbound HTTPS (TCP 443) traffic to these endpoints.
Group Policy Changes
The Activate Web Portal Server name URL(s) have been added to the Internet Options Security Settings for the Local Intranet in Group Policy if required
Web Proxy settings may have to be updated for the Activate Web Portal Server name URL(s) if required
Firewall Rules and Ports
Activate requires network connectivity between the Activate Server and all systems it is intended to manage — including Domain Controllers, Exchange Servers, File and Print Servers, and any other relevant services.
A review of existing firewall configurations is strongly recommended to determine whether any new or modified rules are required to support this connectivity.
The Activate Orchestrator is the component responsible for processing Activate tasks. It communicates with various systems depending on the Activate products being deployed - such as Active Directory, Exchange Server, Microsoft SQL Server, File and Print Servers, and other customer-specific infrastructure.
Activate uses Microsoft .NET to communicate with Microsoft services such as Active Directory to manage Active Directory accounts and other resources.
The following ports below may be required to be opened if you have firewalls between the Activate Server and other systems depending on the modules you are deploying, this traffic must be stateful:
Port Name | Port Number | Type | Service |
|---|---|---|---|
SMTP | 25 | TCP | Email Routing for Notifications |
DNS | 53 | TCP & UDP | DNS for Active Directory |
Kerberos | 88 | TCP & UDP | Active Directory |
NetBIOS & SMB | 135 | TCP & UDP | Microsoft Domain |
NetBIOS & SMB | 137 | TCP & UDP | NetBIOS Name resolution |
NetBIOS & SMB | 138 | TCP & UDP | Microsoft Domain |
NetBIOS & SMB | 139 | TCP & UDP | User and Computer Authentication, Replication |
LDAP – Standard | 389 | TCP & UDP | LDAP for Active Directory |
HTTPS | 443 | TCP & UDP | Web Portal and Activate Anywhere |
NetBIOS & SMB | 445 | TCP & UDP | File Server Access to manage NTFS |
Kerberos | 464 | TCP & UDP | Active Directory |
SQL | 1433 | TCP | Microsoft SQL Access |
LDAP – Global Catalog | 3268 | TCP & UDP | Active Directory |
LDAP – Global Catalog (SSL) | 3269 | TCP & UDP | Active Directory – if required |
Remote Admin / PowerShell | 5985 | TCP & UDP | On-premise Exchange |
Remote Admin / PowerShell (SSL) | 5986 | TCP & UDP | On-premise Exchange |
Office 365 | 80/443 | TCP | Exchange Online and Office 365 User Management |
Activate Cloud Services | 80/443 | TCP | Activate Support |
SMTP Relay
Activate sends notifications via email out of the box, Activate requires a SMTP server to relay emails through for these notifications. Before installing Activate, you must have the SMTP server configured so that the Activate Server(s) can relay email through it.