Enterprise Edition

Configuring your network and firewall settings (Standard)

• Last updated: April 18, 2024

• Read time: 2 Minutes

To ensure that Burp Suite Enterprise Edition is able to function correctly, you may need to configure your firewall to allow the various components to communicate with each other and the public web.

Configuring a single-machine architecture

If you want to run Burp Suite Enterprise Edition on a single machine, you need to make sure that the following connections are allowed:

• Allow your users and API clients to access the web server. By default, they should use port 8080 or port 8443, but you can choose a different port during the installation process.
• To activate your license and enable automatic software updates, allow the Enterprise server to access portswigger.net on port 443. If necessary, configure a network proxy to reach the public web.
• To allow email notifications, give the Enterprise server access to your SMTP server. To find the correct port number for your email service, refer to your email service provider.
• Allow the machine to access websites that you want to scan on the relevant ports, via a proxy server if necessary.

• To gain the full benefit of Burp Collaborator's out-of-band vulnerability detection technology, allow the machine to access *.burpcollaborator.net and *.oastify.com on ports 80 and 443. In addition, the target application must be able to access *.burpcollaborator.net and *.oastify.com on ports 80 and 443.

Configuring a multi-system architecture

Configure the connections as follows:

• Allow your users and API clients to access the web server. By default, they should use port 8080 or port 8443, but you can choose a different port during the installation process.
• To activate your license and perform automatic software updates, allow the Enterprise server to access portswigger.net on port 443. If necessary, configure a network proxy to reach the public web.
• Allow your scanning machines to access the Enterprise server machine on port 8072.
• Allow the Enterprise server to access portswigger.net throughout the scanning machine installation process. This is necessary to activate the scanning machine license.
• Allow your scanning machines to access the websites that you want to scan on the relevant ports.
• If you use the embedded database, allow any external scanning machines to access the Enterprise server machine on port 9092.
• If you use an external database, allow the Enterprise server and any external scanning machines to have access to the database service on the configured host and port.