Network Traffic Required for Patching Linux Devices

Objective

To outline the necessary firewall permissions and repository URLs required for Automox to successfully patch Linux endpoints in environments with strict network restrictions.

Problem / Question

What network traffic and URLs must be allowed through our firewall so that Automox can successfully patch Linux devices?

Answer

To successfully patch Linux endpoints, your network must allow traffic to two distinct areas: the Automox Agent infrastructure and the native Linux distribution software repositories.

Because Automox orchestrates updates but relies on the local OS package manager (like apt or dnf) to download the actual software packages, blocking native repositories will cause patching failures.

1. Automox Required URLs

First, ensure that all standard Automox endpoints are allowed as detailed in our primary network documentation:

• Agent Firewall Allowlisting Rules

2. Default Linux OS Repositories

You must also allow outbound traffic to the software repositories specific to your Linux distributions. While custom repositories or local mirrors may vary by organization, the default external repositories for popular distributions include:

Note: If your organization uses internal repository mirrors (such as a local WSUS equivalent for Linux, like Satellite or JFrog Artifactory), ensure the Automox endpoints can communicate with those local servers instead.

Related Articles

• Troubleshooting Linux Patching Failures