Skip to content

Commit

Permalink
Merge pull request #1523 from SEKOIA-IO/feat/agent-prerequisites
Browse files Browse the repository at this point in the history
feat(agent-prerequisites): add urls
  • Loading branch information
goudyj authored Jan 8, 2024
2 parents 1fcc389 + f5c0f32 commit 20be1b1
Showing 1 changed file with 16 additions and 1 deletion.
17 changes: 16 additions & 1 deletion docs/xdr/features/collect/integrations/endpoint/sekoiaio.md
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,21 @@ The Endpoint Detection Agent supports the following operating systems, **on 64 b
* CentOS 7 and newer
* Redhat 7 and newer

## Prerequisites
The Sekoia.io Endpoint Agent uses the HTTPS protocol to send its events and has an automatic update mechanism. Therefore, it is necessary to open the following streams:

=== "FRA1"

* https://intake.sekoia.io/
* https://api.sekoia.io/

=== "FRA2"
* https://fra2.app.sekoia.io/

=== "MCO1"
* https://mco1.app.sekoia.io/



## Installation

Expand Down Expand Up @@ -102,7 +117,7 @@ The Endpoint Detection Agent is easy to install on Windows or Linux systems once
sudo systemctl status SEKOIAEndpointAgent.service
```

Once installed, the agent collects event logs, normalizes them and sends them to SEKOIA.IO. The contacted domain `intake.sekoia.io` uses the ip `51.159.9.95`. The protocol used to send events is HTTPS (443).
Once installed, the agent collects event logs, normalizes them and sends them to Sekoia.io. The protocol used to send events is HTTPS (443).

#### journald configuration

Expand Down

0 comments on commit 20be1b1

Please sign in to comment.