Network Requirements

To ensure full functionality of the PDQ Connect web app and agent communication, the following network requirements must be met.

PDQ Connect Web App

To access the Connect web app, your firewall must be configured to allow browsers in your environment to reach this URL: 

https://app.pdq.com/

Allow the following to ensure proper display of UI elements:

https://clientstream.launchdarkly.com/
https://app.launchdarkly.com/

PDQ Connect Agent

All outbound communication from the PDQ Connect Agent to PDQ servers occurs over port 443 using WebSocket over HTTPS (WSS). The URLs listed below are used to facilitate communication between the Connect Agent and the Connect application.

https://app.pdq.com/
https://websocket.app.pdq.com/
wss://websocket.app.pdq.com/

Package Files

Files used in the Package Library and Custom Packages are hosted in the locations below. 

https://connect.e9d69694c3d8f7465fd531512c22bd0f.r2.cloudflarestorage.com
https://connect-package-library.e9d69694c3d8f7465fd531512c22bd0f.r2.cloudflarestorage.com
https://pdqinstallers.e9d69694c3d8f7465fd531512c22bd0f.r2.cloudflarestorage.com

The PDQ Connect Agent downloads packages and files from PDQ and Cloudflare over HTTPS (port 443) and verifies file integrity using hash checks.

Some installers may also download additional files directly from the vendor, typically over HTTPS (port 443), but occasionally over HTTP (port 80), depending on the vendor’s setup.

Remote Desktop

Remote desktop requires outbound TCP allowances to one or more of the following:

*.islonline.net:7615 
*.islonline.net:443
*.islonline.net:80

Port 7615 is the default and should always be excluded for the best experience. Port 443 is recommended as a fallback, with 80 as an optional alternative.

Note: All remote desktop sessions are encrypted, including when using port 80.

Email Services

Email notifications related to Logon activity and Scheduled reports will be sent from the following: 

167.89.73.8

Optional IP Address allowances

PDQ services are hosted on Cloudflare and Google Cloud. You can view Cloudflare's IP ranges here for reference.

We recommend creating allow rules based on URLs whenever possible. However, if agents are unable to connect to the WebSocket proxy, you may optionally allow the following IP's:
34.54.45.198:443
[2600:1901:0:7cca::]:443

PDQ Auth Service

PDQ Connect uses portal.pdq.com and auth2.pdq.com for user management and authentication when logging into the PDQ Connect Web App. Users will need access to the following URLs in order to successfully log into PDQ Connect. 

https://auth2.pdq.com/
wss://auth2.pdq.com/
https://portal.pdq.com/
Was this article helpful?