/
Cloud Conditional Access Network requirements
Cloud Conditional Access Network requirements
Component | Port | Type | Source | Target | Purpose | Remark |
---|---|---|---|---|---|---|
CAF filter | 1433 | TCP | Bastion | Database | Allowing the CAF filter to load the configuration and certificate analysis details |
|
External access for bastion listening ports | 443 | TCP | * | Bastion | Permit ADFS access only to managed devices with client certificates | For Client Certificate authentication to work there must not be any SSL termination between the client device and Bastion. |
Admin Portal | 1433 | TCP | Admin Portal | Database | Allowing to configure the certificate analysis details and MDM integration |
|
Admin Portal | MDM API port | TCP | Admin Portal | MDM API | To allow integration with the API and pull managed device information | Required only in case of implementing MDM device auditing |