Service Connectivity Requirements#
Introduction#
When using FutureVuls, the following network connections will be made from your environment to our service. You will need to configure your environment to allow these connections.
Inbound connections from the service
FutureVuls will not initiate any inbound connections to your environment.
List of Connectivity Requirements#
| Purpose | Protocol | Port | Source | Direction | Destination |
|---|---|---|---|---|---|
| Portal site access | HTTPS | 443 | Any terminal/device | Outgoing | https://console.vuls.biz/ https://api.vuls.biz/ https://cognito-idp.ap-northeast-1.amazonaws.com/ |
| DNS Query (Used when running the installer and scanner program) |
DNS | 53 | Server where the scanner is installed Scan target server |
Outgoing | DNS server for external address forward lookup within your system |
| Installer/Scanner program download | HTTP(S) | 80 or 443 | Server where the scanner is installed | Outgoing | https://installer.vuls.biz/ Required only during scanner installation and updates |
| Scan result upload | HTTPS | 443 | Server where the scanner is installed | Outgoing | https://auth.vuls.biz/ vuls-results-tmp-prd.s3.ap-northeast-1.amazonaws.com |
| OS distribution Repository data download |
HTTP(S) | 80 or 443 | Scan target server | Outgoing | Package repository servers provided by each OS distributor |
| Windows Update | HTTPS | 443 | Scan target server | Outgoing | Microsoft Windows Update sites |
| SSH connection | SSH | 22 | Scan target server | Outgoing | Scan target server (Remote scan mode only) Key authentication (passwordless) |
| RestAPI operation | HTTPS | 443 | Any terminal/device | Outgoing | https://rest.vuls.biz/ Required only when performing API operations |
Used IP Addresses#
If you are restricting outbound connections in your deployment environment, we generally recommend configuring your filters (e.g., firewall) to allow the FQDNs listed in the "Connectivity Requirements" section above. However, if your environment (equipment) does not allow the use of FQDNs and you can only configure settings by IP address, see the information below.
FutureVuls is built on Amazon Web Services (AWS). The range of IP addresses allocated by AWS is published on this site, and you can obtain the list file from the "Download" section.
The AWS services used by FutureVuls are shown in the table below. Please check the addresses used by the relevant services and regions from the list file published by AWS, and configure your systems to allow connections to them.
Please note that the content of the published list is updated irregularly, so please check it periodically.
| Purpose | Protocol | Port | Source | FQDN | Service | Region |
|---|---|---|---|---|---|---|
| Portal site access | HTTPS | 443 | Any terminal/device | console.vuls.biz | CloudFront | GLOBAL |
| api.vuls.biz | CloudFront | GLOBAL | ||||
| cognito-idp.ap-northeast-1.amazonaws.com | Cognito | ap-northeast-1 | ||||
| Installer/Scanner program download | HTTPS | 443 | Server where the scanner is installed | installer.vuls.biz | S3 | ap-northeast-1 |
| Scan result upload | HTTPS/PUT | 443 | Server where the scanner is installed | auth.vuls.biz | EC2 | ap-northeast-1 |
| vuls-results-tmp-prd.s3.ap-northeast-1.amazonaws.com | S3 | ap-northeast-1 |