Communication between Endpoint and Platform

Communication between the Endpoint and the Platform is achieved as follows:

Real-time communication through a WebSocket and the Socket.IO v4 library. By this means, all requests sent by a request from the Front End are received and answered. Communication by RESTFUL API: By this means the information required by the EVE Software for its operation is transmitted. The URL and ports of both the Socket.IO and the Restful API are specified in the Auth.json file. It is essential to make sure that this communication is not blocked. The following ports should be open for E.V.E. platform - endpoint communications:

Port 8080 - Communication via http protocol with restful services of EVE platform

Port 8888 - Communication via http protocol and WebSocket between agent and EVE platform

Port 4003 - Communication via https protocol with restful services of EVE platform

Port 8899 - Communication via https protocol and WebSocket between agent and EVE platform

If the Agent is unable to connect to the EVE platform after install and configuration, these ports should be considered.

The communications should be allowed bidirectionially.

Endpoint solutions with network protection features

When deploying the EVE Agent, it is important to note that some endpoint protection solutions (e.g., AV or EDR platforms) may include additional security layers such as web filtering, file download inspection, or URL access control.

While these features are effective in preventing unauthorized content from reaching the endpoint, they must be configured to allow the specific communications required between the EVE Agent and the EVE Platform, as outlined in the Communication between Endpoint and Platform requirements. This is because the agent’s purpose is to validate endpoint-level protections only; it does not perform or rely on evaluations of network filtering or download blocking.

Network-level defenses and download restrictions are addressed separately under the network vector, ensuring that endpoint testing remains accurate and focused without interference from unrelated controls.