- Admin guide
- Overview
- Update channels
- Deploy governance policies
- Configure policies on macOS (Preview)
- Configuring the firewall
Configuring the firewall
Domains that robot and developer machines must reach for the UiPath Platform Installer to check for, download, and apply updates.
Allow the domains that the UiPath Platform Installer uses on robot and developer machines to check for, download, and apply updates and patches to the desktop clients:
| Scenario or functionality | Domains to allow | Impact if blocked |
|---|---|---|
| Check for updates (channel list, channel definitions, and platform manifests) | https://download.uipath.com | The machine cannot check for updates, and no update or patch is offered. Required even when update binaries are served from an internal mirror. |
| Download updates, patches, and installer binaries | https://download.uipath.com | Updates and patches cannot be downloaded. Not required if the DownloadRootLocation policy points to an internal mirror. |
| Check the revocation status of the certificates that sign update manifests and binaries | http://ocsp.digicert.comhttp://crl3.digicert.comhttp://crl4.digicert.comhttp://cacerts.digicert.com | Signature validation can fail, and the update is rejected. When a proxy is configured, revocation is checked against the local cache only. |
| Send installer and updater telemetry | https://westeurope-5.in.applicationinsights.azure.com | Optional. Updates continue to work, but diagnostic telemetry used for support is unavailable. |
The DownloadRootLocation policy redirects only the large binary payloads (product packages, patches, and installer binaries) to your internal URL or UNC path. The channel list, channel definitions, and signed platform manifests remain cloud-hosted on download.uipath.com, so machines that use a mirror must still be able to reach that domain. For details, see Deploy governance policies.
The certificate revocation endpoints use HTTP over port 80. All other domains use HTTPS over port 443.
To turn off installer and updater telemetry, install with TELEMETRY_ENABLED=0 on Windows, or set the TelemetryDisabled policy on macOS.