> For the complete documentation index, see [llms.txt](https://docs.verge.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.verge.io/knowledge-base/networking/egress-firewall-requirements.md).

# Egress Firewall Requirements for VergeOS

Outbound firewall allow-list for VergeOS systems — ports and destinations required to reach the Update Server and Marketplace.

If your VergeOS system operates behind a restrictive egress firewall or proxy, you must allow outbound access to the **Update Server**. Access to the **Marketplace** is optional, but required if you want to use Verge.io-provided recipes. This article describes what to allow and how to find the exact destinations for your environment.

{% hint style="success" %}
Systems that cannot allow any outbound internet access require a special air-gap license. See [Requesting an Air-Gap License](/knowledge-base/system-administration/requesting-an-airgap-license.md).
{% endhint %}

## Outbound Access

| Service       | Required | Protocol | Port | Source IP        |
| ------------- | -------- | -------- | ---- | ---------------- |
| Update Server | Yes      | TCP      | 443  | Management/UI IP |
| Marketplace   | No       | TCP      | 443  | Management/UI IP |

All outbound traffic originates from your system's **management (UI) IP address** — not from individual node IPs.

## Finding the Destination FQDNs

VergeOS may serve different regions from different hostnames. Locate the exact destinations directly in your UI:

### Update Server URL

1. Navigate to **System > Updates**.
2. The **URL** field on the dashboard shows the update server address (e.g., `https://updates.vergeos.com`).

### Marketplace URL

1. From the top menu, navigate to **Repositories > List**.
2. Locate the **Marketplace** entry and note its URL (e.g., `https://marketplace.vergeos.com`).

Allow outbound TCP 443 from your management IP to each of these hostnames.

## Additional Resources

* [VergeOS Marketplace](/automate-protect-and-extend/automation/marketplace-vm-recipes.md)
* [Licensing and Software Updates](/run-the-platform/system-administration/licensing-and-updates.md)

***

{% hint style="info" %}
**Document Information**

* Last Updated: 2026-06-03
* VergeOS Version: 26.1
  {% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.verge.io/knowledge-base/networking/egress-firewall-requirements.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.