Network Connectivity Troubleshooting

Team: Huntress EDR
Product: Networking
Environment: Huntress Agent
Summary: To ensure uninterrupted connection when communicating between Huntress Agents and our cloud servers, confirm all network settings are correct (proper open ports, allowed URLs and certificates, exceptions for Deep Packet Inspection, TLS / SSL, etc...). Use our connection tester to check! 

Huntress uses certificates and encrypted communication in order to ensure each agent and our cloud servers are able to communicate securely. This page is a brief overview to help you ensure connectivity is uninterrupted.

Do you use Deep Packet Inspection or some other form of TLS/SSL certificate interception?

You'll need to whitelist the certificate for huntress.io More about that here

Does your firewall restrict outgoing communication on port 443?

Check out our KB on which URL's you'll need to allow communications on

Still having connectivity issues?

Windows

1. Windows Connection Tester 2 (updated Aug 7, 2023) - for testing Certificate errors or use this PowerShell:

   try { ($webRequest = [Net.WebRequest]::Create("https://huntress.io")).GetResponse().Dispose() } catch {}
   Write-Host $webRequest.ServicePoint.Certificate.Subject

   If the output is not the Huntress.io certificate then it should indicate who the offending certificate interceptor is (look for the CN= field).
   
   
2. PowerShell 4.0+  for testing connectivity from your end point to our cloud servers

   @("huntresscdn.com", "update.huntress.io", "huntress.io", "eetee.huntress.io", "huntress-installers.s3.amazonaws.com", "huntress-updates.s3.amazonaws.com", "huntress-uploads.s3.us-west-2.amazonaws.com", "huntress-user-uploads.s3.amazonaws.com", "huntress-rio.s3.amazonaws.com", "huntress-survey-results.s3.amazonaws.com", "notify.bugsnag.com") | Test-NetConnection -Port 443 | Select ComputerName, TcpTestSucceeded

   For older OS - PowerShell 3.x for testing connectivity
   

   $servers = @("huntresscdn.com", "update.huntress.io", "huntress.io", "eetee.huntress.io", "huntress-installers.s3.amazonaws.com", "huntress-updates.s3.amazonaws.com", "huntress-uploads.s3.us-west-2.amazonaws.com", "huntress-user-uploads.s3.amazonaws.com", "huntress-rio.s3.amazonaws.com", "huntress-survey-results.s3.amazonaws.com")
   foreach ($server in $servers) {
       try {
           $TCPClient = New-Object System.net.sockets.tcpclient($server,443)
           if ($TCPClient.Connected){
               Write-Host "$($server) connection result - connected!"
           } else {
               Write-Host "$($server) connection result - FAILED"
           }
           $TCPClient.Close()
       } catch {}
   }

3. Still having trouble? Contact us support@huntress.io !

Mac

1. Bash for testing connectivity from your end point to our cloud servers

   foreach hostn ("update.huntress.io" "huntress.io" "eetee.huntress.io" "huntress-installers.s3.amazonaws.com" "huntress-updates.s3.amazonaws.com" "huntress-uploads.s3.us-west-2.amazonaws.com" "huntress-user-uploads.s3.amazonaws.com" "huntress-rio.s3.amazonaws.com" "huntress-survey-results.s3.amazonaws.com")
   printf "Attempting to connect to %s \n" $hostn
   nc -z -v hostn 443
   end

2. Bash for testing Certificate errors

   openssl s_client -connect huntress.io:443 -servername huntress.io | openssl x509 -in /dev/stdin -noout -text

   Output should be similar to this:
   
3. Still having trouble? Contact us support@huntress.io !

Related Article(s):

• External Recon
• Host Isolation
• How Much Bandwidth Does the Huntress Agent Use?