IPs to allow (US)

tCell agents connect to the Rapid7 Insight platform on two domains, us.agent.tcell.insight.rapid7.com and us.input.tcell.insight.rapid7.com. Both must be accessible on port 443 for the agent to operate correctly. If your firewall blocks outbound connections to the internet, you'll need to make exceptions for tCell traffic.

Optionally, you may also want to allow connections to the tCell admin console from your datacenter hosts. The admin console is hosted on insight.rapid7.com, also on port 443.

Also, if you have setup Slack alerts or if you are sending alerts to Webhooks, you will have to allow connections from 3.90.120.231, 34.226.38.30, and 3.92.116.116.

HostnameIP AddressesPortRequired?Description
us.agent.tcell.insight.rapid7.com34.226.68.35
54.144.111.231
52.203.25.223
34.236.161.191
443RequiredtCell Cloud
us.input.tcell.insight.rapid7.com34.226.68.35
54.144.111.231
52.203.25.223
34.236.161.191
443RequiredtCell Cloud
insight.rapid7.com,
us.tcell.insight.rapid7.com
443OptionaltCell Admin Console
N/A3.90.120.231
34.226.38.30
3.92.116.116
443OptionalSlack/Webhooks