> For the complete documentation index, see [llms.txt](https://docs.verge.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.verge.io/knowledge-base/networking/egress-firewall-requirements.md).

# Egress Firewall Requirements for VergeOS

If your VergeOS system operates behind a restrictive egress firewall or proxy, you must allow outbound access to the **Update Server**. Access to the **Marketplace** is optional, but required if you want to use Verge.io-provided recipes. This article describes what to allow and how to find the exact destinations for your environment.

{% hint style="success" %}
Systems that cannot allow any outbound internet access require a special air-gap license. See [Requesting an Air-Gap License](/knowledge-base/getting-started/requesting-an-airgap-license.md).
{% endhint %}

## Outbound Access

| Service       | Required | Protocol | Port | Source IP        |
| ------------- | -------- | -------- | ---- | ---------------- |
| Update Server | Yes      | TCP      | 443  | Management/UI IP |
| Marketplace   | No       | TCP      | 443  | Management/UI IP |

All outbound traffic originates from your system's **management (UI) IP address** — not from individual node IPs.

## Finding the Destination FQDNs

VergeOS may serve different regions from different hostnames. Locate the exact destinations directly in your UI:

### Update Server URL

1. Navigate to **System > Updates**.
2. The **URL** field on the dashboard shows the update server address (e.g., `https://updates.vergeos.com`).

### Marketplace URL

1. From the top menu, navigate to **Repositories > List**.
2. Locate the **Marketplace** entry and note its URL (e.g., `https://marketplace.vergeos.com`).

Allow outbound TCP 443 from your management IP to each of these hostnames.

## Additional Resources

* [VergeOS Marketplace](/automate-protect-and-extend/automation/marketplace-vm-recipes.md)
* [Licensing and Software Updates](/run-the-platform/system-administration/licensing-and-updates.md)

***

{% hint style="info" %}
**Document Information**

* Last Updated: 2026-06-03
* VergeOS Version: 26.1
  {% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.verge.io/knowledge-base/networking/egress-firewall-requirements.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.