Requirements for Alert Logic Managed Web Application Firewall (WAF) for CenturyLink
United States firewall rules
Use the following rules to communicate with the US Data Center.
Appliance inbound
| Source | Destination | Protocol | Port | Description |
|---|---|---|---|---|
| 204.110.218.96/27 | Appliance | TCP | 2222 | Secure Shell (AWS Autoscaling Only) |
| 204.110.219.96/27 | Appliance | TCP | 2222 | Secure Shell (AWS Autoscaling Only) |
| 208.71.209.32/27 | Appliance | TCP | 2222 | Secure Shell (AWS Autoscaling Only) |
| 204.110.218.96/27 | Appliance | TCP | 4849 | Appliance user interface |
| 204.110.219.96/27 | Appliance | TCP | 4849 | Appliance user interface |
| 208.71.209.32/27 | Appliance | TCP | 4849 | Appliance user interface |
| 204.110.218.96/27 | Appliance | TCP | 22 | Optional and temporary- required for troubleshooting during provisioning only |
| 204.110.219.96/27 | Appliance | TCP | 22 | Optional and temporary- required for troubleshooting during provisioning only |
| 208.71.209.32/27 | Appliance | TCP | 22 | Optional and temporary- required for troubleshooting during provisioning only |
Port 22 is required for troubleshooting during the provisioning process only. After the provisioning process is complete, you may close the port.
Appliance outbound
| Source | Destination | Protocol | Port | Description |
|---|---|---|---|---|
| Appliance | 204.110.218.96/27 | TCP | 443 | Data transport |
| Appliance | 204.110.219.96/27 | TCP | 443 | Data transport |
| Appliance | 204.110.218.96/27 | UDP | 123 | NTP (OpenBSD and CentOS only) |
| Appliance | 204.110.219.96/27 | UDP | 123 | NTP (OpenBSD and CentOS only) |
| Appliance | 0.0.0.0/0 | TCP | 443 | AWS S3 (AWS only) |
| Appliance | 8.8.8.8 | TCP/UDP | 53 | DNS |
| Appliance | 8.8.4.4 | TCP/UDP | 53 | DNS |
European Union firewall rules
Use the following rules to communicate with the EU Data Center.
Appliance inbound
| Source | Destination | Protocol | Port | Description |
|---|---|---|---|---|
| 185.54.124.0/24 | Appliance | TCP | 4849 | Appliance user interface |
| 185.54.124.0/24 | Appliance | TCP | 2222 | Secure Shell (AWS Autoscaling Only) |
| 185.54.124.0/24 | Appliance | TCP | 22 | Optional and temporary- required for troubleshooting during provisioning only |
Port 22 is required for troubleshooting during the provisioning process only. After the provisioning process is complete, you may close the port.
Appliance outbound
| Source | Destination | Protocol | Port | Description |
|---|---|---|---|---|
| Appliance | 185.54.124.0/24 | UDP | 123 | NTP (OpenBSD only) |
| Appliance | 0.0.0.0/0 | TCP | 443 | S3 access (optional for non-AWS) |
| Appliance | 185.54.124.0/24 | TCP | 443 | Data transport/software updates |
| Appliance | DNS Servers | TCP/UDP | 53 | DNS |
VMware virtual appliance
The following table describes the basic system requirements to install a VMware virtual appliance:
| Components | System Requirements |
|---|---|
| CPU | 2 CPUs 64 bit |
| RAM | 4 GB |
| Disk space | 250 GB |
| Virtual network interface(s) | An interface with an external IP address for management An interface with access to the web servers to be protected |
| Encryption / Decryption for SSL traffic | AES-NI CPU instruction set for encryption/decryption of SSL traffic on VMs and host OS is recommended |
| Clustering | For clustering to work, make sure promiscuous mode, forged transmits, and MAC address changes are allowed on the VMware virtual switch (vSwitch) or the port group in the VMware ESX network configuration |
Physical appliance
The following table describes the basic system requirements to install a physical appliance:
| Components | System Requirements |
|---|---|
| Equipment | 100–250 Mbit |
| CPU | Intel Xeon E3 4 cores |
| RAM | 8 GB |
| DISC | 500GB |
| Chassis | 1U rack mounted |
| Power | 250W |
| Log collection support | N/A |
| Encryption | TLS Standard (SSL): 1024–2048bit key encryption, 256bit AES bulk encryption |
Operating systems and browser support
The Alert Logic console supports the current version and the previous major version of the following operating systems and browsers:
| Operating system support | Browser support |
|---|---|
| Mac, Linux, and Windows | Chrome, Safari, Firefox, Opera, and Internet Explorer |
Alert Logic cannot guarantee that other browsers and versions will work with our product.
Related topics
