Understanding the Required Port for Informatica Cloud Secure Agent

Port Requirement Overview

The Informatica Cloud Secure Agent communicates with the Informatica Cloud services over TCP port 443. This standard HTTPS port allows encrypted data transfer and is the only port the agent needs to be open outbound on the host firewall.

Why Port 443 Is Mandatory

Port 443 is the default for secure web traffic, providing TLS encryption that protects credentials and data in transit. The agent's design relies on this single, well‑known port to simplify network setup and avoid conflicts with other applications.

Firewall Configuration Steps

To ensure the Secure Agent can connect:

• Allow outbound TCP traffic on port 443 from the machine where the agent is installed.
• If a proxy is used, configure the agent to route HTTPS through the proxy, preserving the port requirement.
• Confirm that any intrusion‑prevention system does not block TLS handshakes to Informatica's cloud endpoints.

Common Connectivity Issues

Problems usually stem from:

• Outbound port restrictions on corporate firewalls.
• Misconfigured proxy settings that block HTTPS.
• Network address translation (NAT) devices that alter TLS packets.

Checking the agent logs for error codes such as ConnectionFailed or SSLHandshakeError helps pinpoint whether the port is being blocked.

Testing the Port

Use tools like telnet or openssl s_client to verify connectivity:

telnet your-agent-host 443 openssl s_client -connect cloud.informatica.com:443

A successful handshake confirms the port is open and the TLS certificate is trusted.

Impact of Changing the Port

Informatica does not support alternative ports for the Secure Agent. Attempting to use a non‑standard port will break communication and is not recommended. If your environment cannot open port 443, consider using a dedicated VPN tunnel that routes traffic to the cloud endpoint over an allowed port.

Summary of Key Settings