Cloud Conditional Access Network requirements

Component	Port	Type	Source	Target	Purpose	Remark

Component	Port	Type	Source	Target	Purpose	Remark
CAF filter	1433	TCP	Bastion	Database	Allowing the CAF filter to load the configuration and certificate analysis details
External access for bastion listening ports	443	TCP	*	Bastion	Permit ADFS access only to managed devices with client certificates	For Client Certificate authentication to work there must not be any SSL termination between the client device and Bastion.
Admin Portal	1433	TCP	Admin Portal	Database	Allowing to configure the certificate analysis details and MDM integration
Admin Portal	MDM API port	TCP	Admin Portal	MDM API	To allow integration with the API and pull managed device information	Required only in case of implementing MDM device auditing

SphereShield Cloud Conditional Access Knowledge Base