For endpoints and users to connect to WatchGuard Cloud, your network must allow connections to the WatchGuard Cloud URLs listed in the attached text file. 

All traffic to WatchGuard Cloud uses TCP port 443, with one exception. Fireboxes that run Fireware v12.2.1 or lower use port 8883. 

The HTTPS-Proxy on the Firebox might interfere with connections to WatchGuard Cloud URLs. To make sure your Firebox allows this traffic from your network to WatchGuard Cloud, we recommend you create a packet filter policy on the Firebox to allow connections to WatchGuard Cloud domains. 

AuthPoint mobile apps use these ports to connect to Apple and Google servers for push authentication:
 

• IOS: TCP ports 5223, 2195-2196 and 443
• Android: TCP ports 5228-5230 and 443

To make sure that users on your network can approve AuthPoint push authentication requests, configure your Firebox or other network firewall to allow outbound connections on these ports.