Entitle agent network access requirements
The Entitle agent requires outbound network access to function. Configure your firewall to permit the following outbound connections from the host where the agent is installed. All traffic is unidirectional, originating from the agent.
If your organization joined Entitle before March 25, 2026, your network access requirements are different. For more information, see Entitle agent network access requirements.
| Description | Source | Destination | Region | Port |
|---|---|---|---|---|
| Entitle service | Entitle agent | agent.us.entitle.io | US | 8080 |
| Entitle service | Entitle agent | agent.eu.entitle.io | EU | 8080 |
| Entitle service | Entitle agent | agent.ca.entitle.io | CA | 8080 |
| Agent image repository | Entitle agent | ghcr.io, *.ghcr.io | CA, EU, US | 443 |
| DNS | Entitle agent | DNS server | CA, EU, US | 53 |
* Allows for all subdomains.
Updated about 1 hour ago
