Forum Discussion

Nawel335's avatar
Nawel335
Copper Contributor
Feb 04, 2021

Needs Ports MDI

Hello Everyone,   I'm working on Microsoft Defender for Identity topic, i am at the ports opening part. can you please tell me what is the need to open port 444? for updates are there not automatic...
EliOfek's avatar
EliOfek
Icon for Microsoft rankMicrosoft
Feb 04, 2021

Nawel335 
Note that this is only TCP/444 for localhost, in 99% of cases it's  open by default.
It is used for communication between the sensor service and the updater service, 

and it's not just for automatic updates, the services needs to communicate for more operations, and if it's not working the sensor will fail to start.

  • Nawel335's avatar
    Nawel335
    Copper Contributor
    Feb 04, 2021

    EliOfek 

    thank you for the reply, on the other hand I will like to know for the port 444  is open from the sensor service to the sensor update service. it's in the cloud or to a URL like '* .atp.azure.com"?

    • EliOfek's avatar
      EliOfek
      Icon for Microsoft rankMicrosoft
      Feb 04, 2021

      Nawel335 \No, it's localhost, internal machine communication between 2 windows services on the machine itself. nothing goes out of the machine via 444.

      • pugazhendhi's avatar
        pugazhendhi
        Brass Contributor
        Mar 05, 2021
        Before installation of DFI/ATP, due we need to check for port 444 open status in server or this port will list after the agent installtion?

Resources