Refer to these system requirements to allow your Puppet Comply application to connect to Puppet Enterprise (PE).
Open port requirements
|8140||TCP||Preflight checks||Comply||Puppet primary server|
|8143||TCP||PE integration||Comply||PE Orchestrator|
|4433||TCP||PE integration||Comply||PE RBAC|
|443||TCP||Comply access||User browser||Comply UI|
|443||TCP||Sending reports||Scan target node||Comply server|
|30303||TCP||Assessor downloads and sending reports||Scan target node||Comply|
Supported Puppet Enterprise versions
The following versions of Puppet Enterprise (PE) are supported for use with Comply:
|2019.8.4 and later|
For more information about PE versions, see Puppet Enterprise lifecycle policy.
Java Runtime Environment requirements
If you install the Comply module with the default
true for the
manage_java option, the
correct version of Java Runtime Environment (JRE) is installed automatically, and no
further action is required.
manage_javaoption on some operating systems, such as Ubuntu 16.04 and Mac OS X.
If you are independently managing JRE, ensure that the appropriate version is installed on the host system where the CIS-CAT Pro Assessor resides. JRE v1.8 or later is required. For the latest information about JRE requirements, see the CIS-CAT Pro Assessor Configuration Guide.