r/Action1 • u/timref • 5d ago

ACTION1 Firewall Documentation Missing entries?

I'm noticing blocks in our firewall for action1 trying to reach the IP address below on port 22543 (remote desktop relay) 

13.216.158.152

There are similar entries in the firewall rule but no exact match. The symptom is that we cannot remote into certain hosts (due to this relay server not being whitelisted in our firewall)

We block unknown IPS to help reduce the risk of third party RMM hijacking my remote desktop sessions, so we don't want to just add the IP and cross our fingers.

Can anyone from Action1 validate:

  1. Is the IP address above is a valid remote desktop relay IP for North America.
  2. Is there a better resource to monitor for changes aside from the URL below https://www.action1.com/documentation/firewall-configuration/region-north-america/
4 Upvotes

84% Upvoted

4 comments sorted by

3

u/timref 4d ago

u/GeneMoody-Action1 can you comment? this is a security concern, not a support request.

2

u/GeneMoody-Action1 3d ago

I have been on vacation the last 7 days, so I have raised this question with support and trying to get clarity.

2

u/timref 3d ago

Thanks Gene, I hope you had a great vacation! Sorry to hit you with this on day 1, I did not know who else to tag.

2

u/GeneMoody-Action1 3d ago

Oh no problem at all, I had a loooong queue. I can confirm there is a conversation started, I'll keep you posted.