---
title: Kron PAM Outbound Ports
slug: kronpam-support-and-maintenance-guides/kron-pam-outbound-ports
docTags: 
createdAt: 2024-07-24T12:11:14.396Z
---

Kron PAM services use specific outbound ports to access endpoints and to the servers integrated. The following port of target servers should be open between Kron PAM and target servers. The required firewall rules must be defined on the network configuration.

:::hint{type="info"}
Table of Kron PAM Outbound Port Legend includes all Kron PAM modules. Please configure your environment based on the modules that your platform includes.
:::

| **Service Name**                                 | **Port Number**                                                   | **Source**                               | **Destination**                                            | **Comments**                                                           |
| ------------------------------------------------ | ----------------------------------------------------------------- | ---------------------------------------- | ---------------------------------------------------------- | ---------------------------------------------------------------------- |
| **LDAP /&#x20;**<br />**Active Directory**       | 389 / TCP<br />636 / TCP                                          | Kron PAM Instances                       | LDAP / Active Directory Server                             | These ports are used to access the Active Directory server of tenants. |
| **SMTP**                                         | 25 / TCP<br />465 / TCP<br />587 / TCP                            | Kron PAM Instances                       | Mail Server                                                | These ports are used to access the Active Directory server of tenants. |
| **SIEM**                                         | 514 / UDP                                                         | Kron PAM Instances                       | SIEM Server                                                | These ports are used to access the SIEM server of tenants.             |
| **Database Replication**                         | 31417 / TCP<br />                                                 | Between Kron PAM Instances<br />(N to N) | Between Kron PAM Instances<br />(N to N)                   | These ports are used to provide replication between instances.         |
| **Remote Desktop Connection**<br />**RDP / VNC** | 3389 / TCP<br />5900 / TCP<br />and customized ports if there are | Kron PAM Instances                       | RDP/VNC supported devices that will be managed by Kron PAM | These ports are used during RDP/VNC connections to the devices.        |
| **Secure Shell**<br />**SSH**                    | 22 / TCP<br />and customized ports if there are                   | Kron PAM Instances                       | SSH supported devices that will be managed by Kron PAM     | These ports are used during SSH connection to the devices.             |
| **File Transfer**<br />**S/FTP**                 | 22 / TCP<br />23 / TCP<br />and customized ports if there are     | Kron PAM Instances                       | S/FTP supported devices that will be managed by Kron PAM   | These ports are used during S/FTP connections to the devices.          |
| **Web Browsing**<br />**HTTP/S Proxy**           | Any port that is needed                                           | Kron PAM Instances                       | HTTP/S supported devices that will be reached by Kron PAM  | These ports are used during HTTP/S connection to the devices.          |
| **RADIUS**                                       | 1645 / UDP<br />1646 / UDP 1812 / UDP<br />181 / UDP              | Kron PAM Instances                       | RADIUS devices                                             | These ports are used during RADIUS connection to the devices.          |
| **Managed**<br />**Database/s**                  | Depends on DB providers and ports                                 | Kron PAM Instances                       | Databases that will be managed by Kron PAM                 | These ports are used during database connection to the servers.        |

You can check whether a port is open by running the following command in the CLI of the Kron PAM Instance. You must be able to connect to target devices over the related port.

**Check the port connectivity:**

`[root@kronpam~]# ``telnet <target IP Address> <Target Host>`

**Successful connection example:**

The expected output is as below after a successful connection:

`[root@kronpam~]# telnet X.X.X.X 22
`
`Trying X.X.X.X ...
`
`Connected to X.X.X.X.
`
`Escape character is ‘^]’`

**Failed connection example:**

If you observe the output below, check the status of the target device and firewall rules.

`[root@kronpam~]# telnet X.X.X.X 22
`
`telnet: connect to address`<font color="#eb144c"> `X.X.X.X`</font>`: Connection timed out`