To communicate with your storage, Air Gap Protect requires that certain endpoints (URLs) be opened.
Note
Replace [region] with the region the MediaAgent is in.
| Source | Destination | TCP/UDP | Port | Commvault SaaS | Commvault software |
|---|---|---|---|---|---|
| Control plane | https://login.microsoftonline.com | TCP | 443 | -- | Yes |
| Control plane | https://api.mcss.metallic.io (40.75.17.108) | TCP | 443 | -- | Yes |
| Control plane | https://metallic.io | TCP | 443 | -- | Yes |
| Control plane | https://www.commvault.com | TCP | 443 | -- | Yes |
| MediaAgent | s3.[region].amazonaws.com | TCP | 443 | Yes | Yes |
| MediaAgent | s3.us-gov-east-1.amazonaws.com | TCP | 443 | Yes | Yes |
| MediaAgent | s3.us-gov-west-1.amazonaws.com | TCP | 443 | Yes | Yes |
Azure global regions
| Source | Destination | TCP/UDP | Port | Commvault SaaS | Commvault software |
|---|---|---|---|---|---|
| Control plane | https://login.microsoftonline.com | TCP | 443 | -- | Yes |
| Control plane | https://api.mcss.metallic.io (40.75.17.108) | TCP | 443 | -- | Yes |
| Control plane | https://metallic.io | TCP | 443 | -- | Yes |
| Control plane | https://www.commvault.com | TCP | 443 | -- | Yes |
| MediaAgent | *.blob.core.windows.net | TCP | 443 | Yes | Yes |
| MediaAgent | https://login.microsoftonline.com | TCP | 443 | Yes | Yes |
Azure Government regions
| Source | Destination | TCP/UDP | Port | Commvault SaaS | Commvault software |
|---|---|---|---|---|---|
| Control plane | https://login.microsoftonline.com | TCP | 443 | -- | Yes |
| Control plane | https://api.mcss.metallic.io (40.75.17.108) | TCP | 443 | -- | Yes |
| Control plane | https://metallic.io | TCP | 443 | -- | Yes |
| Control plane | https://www.commvault.com | TCP | 443 | -- | Yes |
| MediaAgent | *.blob.core.usgovcloudapi.net | TCP | 443 | Yes | Yes |
| MediaAgent | https://login.microsoftonline.us | TCP | 443 | Yes | Yes |
| Source | Destination | TCP/UDP | Port | Commvault SaaS | Commvault software |
|---|---|---|---|---|---|
| Control plane | https://login.microsoftonline.com | TCP | 443 | -- | Yes |
| Control plane | https://api.mcss.metallic.io (40.75.17.108) | TCP | 443 | -- | Yes |
| Control plane | https://metallic.io | TCP | 443 | -- | Yes |
| Control plane | https://www.commvault.com | TCP | 443 | -- | Yes |
| MediaAgent | storage.googleapis.com | TCP | 443 | Yes | Yes |
| Source | Destination | TCP/UDP | Port | Commvault SaaS | Commvault software |
|---|---|---|---|---|---|
| Control plane | https://login.microsoftonline.com | TCP | 443 | -- | Yes |
| Control plane | https://api.mcss.metallic.io (40.75.17.108) | TCP | 443 | -- | Yes |
| Control plane | https://metallic.io | TCP | 443 | -- | Yes |
| Control plane | https://www.commvault.com | TCP | 443 | -- | Yes |
| MediaAgent | objectstorage.[region].oraclecloud.com | TCP | 443 | Yes | Yes |
| MediaAgent | identity.[region].oraclecloud.com | TCP | 443 | Yes | Yes |