moon 0 Report post Posted December 30, 2020 The server on which you are trying to install the program has blocked an external network. The external IP address must be opened separately in the firewall. I'd like to know the IP address that the firewall needs to open for installation. Share this post Link to post Share on other sites
ritchie58 450 Report post Posted December 31, 2020 Here are the ports that you need to "create allow rules for both in-coming & out-going traffic" by your 'software based firewall' for Immunet to install & then function properly. 53 - UDP is needed for DNS look-ups. 80 - TCP (HTTP) 443 - TCP (HTTPS) 32137 - TCP & UDP Also, if your router or modem has a built-in 'hardware based firewall' you will need to add allow rules to these ports to that as well. In the event that after adding allow rules to these ports you still run into problems you could try and add 'allow rules' to these Domains & URL's that Immunet uses. Most of them use ports 80 & 443. These Domains mostly use port 443/SSL, but may fall back to 80/HTTP, and also occasionally use 32137 TCP & UDP. 50.16.57.96 50.16.120.26 50.16.122.1 50.16.157.87 67.202.39.9 174.129.187.1 184.72.79.33 184.72.92.143 update.immunet.com cloud-consumer-asn.immunet.com cloud-nfm.immunet.com fmd.immunet.com submit.immunet.com console.amp.cisco.com https://crash.immunet.com cloud-consumer-est.immunet.com https://consumer-event.immunet.com https://consumer-mgmt.immunet.com https://policy.amp.cisco.com public-cloud.immunet.com ws.immunet.com http://www.immunet.com/ http://support.immunet.com/ https://enterprise-m....sourcefire.com current.cvd.win.clamav.net is accessed via a DNS query (port 53), and returns the IP of the nearest least busy ClamAV definitions server. Keep an eye on the up to date icon in the bottom right of Immunet’s interface and if it’s not a green check-mark click update now and if it still doesn’t change to a green check-mark after the update finishes then likely Immunet can’t reach the appropriate ClamAV definitions sever. Unfortunately the direct IP addresses Immunet connects to aren’t necessarily long lived and can’t reliably be whitelisted. They're generally only used in the case of DNS lookups failing continuously. Cheers, Ritchie... 1 Share this post Link to post Share on other sites
