Firewall Requirements

Our infrastructure team is asking what firewall configurations are required for DependencyTracker to do its job (target IP / FQDN, port, and whether TLS is used, i.e HTTP or HTTPS).

The DT documentation lists sources like NVD, but doesn't provide the URL used, so without running Fiddler or guessing at the endpoints, there's no way to answer the question.

Can we *please* get a comprehensive list of endpoints used for repositories and datasources?

Start by reviewing the existing DependencyTracker documentation entries for sources such as NVD and trace the repository and datasource endpoints they describe or omit. Done means a comprehensive documented list of target IP/FQDN, port, and HTTP/HTTPS/TLS requirements, without relying on Fiddler or guesses.

Written by the indexing model from the issue text.