# Requirements ## The machine The probe runs as a Windows service on a machine of your network. It can be a server or an always-on PC, physical or virtual, as long as it can reach the networks to scan. | Requirement | Details | | --- | --- | | **Operating system** | Windows Server 2016 or later, Windows 10 or Windows 11. | | **Privileges** | A local administrator account, to install the probe. The service then runs as Local System. | | **Software** | None. The probe is a single executable, signed by Inside Technologies Srl. | The machine should stay on: the probe scans only while it runs. ## Firewall The probe only opens outbound connections: it does not need any inbound port. | From | To | Port | Purpose | | --- | --- | --- | --- | | The probe | `cyberguard-api-network-itn.cyberguard.srl` | TCP 443 (HTTPS) | Registration, configuration and sending the results. | | The probe | The networks to scan | ICMP echo (ping) | Finding the devices that are on. | | The probe | The networks to scan | UDP 161 (SNMP) | Reading the device data. | A device that does not answer the ping is not queried through SNMP. If a firewall between the probe and a network blocks ICMP, allow it from the probe's IP address. ## The network devices To appear in the list, a device must have **SNMP enabled** and accept queries from the IP address of the probe. Many devices restrict SNMP to a list of allowed managers: add the probe's IP address to it. The probe only reads: use **read-only** SNMP credentials. | Version | What you need | | --- | --- | | **v2c** | The community string. | | **v3** | The user and, depending on how the device is configured, the authentication protocol and password and the privacy protocol and password. | For SNMP v3 the probe supports **MD5** and **SHA** for authentication, **DES** and **AES** for privacy, and all three security levels: no authentication, authentication only, authentication and privacy. Prefer v3 when your devices support it. With v2c the community travels in clear text, and a device that receives a wrong community simply does not answer, so a typo is hard to tell from a device without SNMP. ## In the portal To configure probes you need the **network devices** module in your permission group (see [Users & Permissions](https://wiki.cyberguard.srl/dim/administration/users-and-permissions.md#permission-groups)).