Network Requirements
Domains for workstations
This page is for IT teams writing rules for the workstations people connect to. The ports are on Network Requirements.
From workstations
Section titled “From workstations”| Domain | Port | Purpose |
|---|---|---|
updates.computle.com | TCP 443 | Host updates: the check and the manifest |
softwaredownloads.oncomputle.com, storage.googleapis.com, computleupdatewitness.blob.core.windows.net | TCP 443 | The three update witnesses. All three must be reachable or no update installs. See Host Updates. |
*.r2.cloudflarestorage.com | TCP 443 | Update downloads, as time-limited links in the manifest |
ca-ths-1.prod.computle.com | TCP 443 | Certificate enrolment and renewal |
*.id.computle.net | TCP 443 | The organisation’s identity service: certificate renewal, host credential, Single Sign-On |
asmgr.computle.com | TCP 443 | Host credential and state, for organisations not yet on their own identity service |
keygen.computle.com | TCP 443 | Licence check, hourly |
logs.svc.broker.computle.com | TCP 443 | Logs |
Both devices and workstations also need the connection services.
Related
Section titled “Related”- Network Requirements
- Domains for user devices
- Connection services
- Proxies and TLS inspection
- Host Updates
Questions
Section titled “Questions”What does the workstation need that the device does not?
Section titled “What does the workstation need that the device does not?”The certificate authority, identity service, licence and update witness domains in the Workstations table. The workstation authenticates to several of them with its own certificate, so they must be excluded from TLS inspection.