# Required firewall settings for Mender **URL:** \ **Category:** General Discussions\ **Created:** [August 28, 2020, 9:29am UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369 "2020-08-28T09:29:06Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![digupats](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/digupats/32/666_2.png) [@digupats](https://hub.mender.io/u/digupats)\ **Post date:** [August 28, 2020, 9:29am UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/1 "2020-08-28T09:29:06Z")
The UP squared device (with mender client running) is connected at customer network. It does show the IP address (network that belongs to customer) in `Device inventory` in Mender management software running on AWS . But Mender management software can not perform deployment. The status remains `Pending`. The deployment works well if the device is connected to our network. Is there (customer side) any firewall settings that does not allow communication with device from outside? Even, I can not ssh into the device. ---
**Author:** ![drewmoseley](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/drewmoseley/32/47_2.png) [@drewmoseley](https://hub.mender.io/u/drewmoseley)\ **Post date:** [August 28, 2020, 1:33pm UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/2 "2020-08-28T13:33:40Z")
The mender client connects to the Mender server running on port 443 with TLS. As long as that connection succeeds you should be able to add the device. Additionally there is another connection to download the artifact. In our hosted plans that is a dynamically generated S3 URL over port 443 as well. If you are using a self-hosted Mender server, then the artifact URL will be by default on port 9000. Drew ---
**Author:** ![digupats](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/digupats/32/666_2.png) [@digupats](https://hub.mender.io/u/digupats)\ **Post date:** [August 31, 2020, 8:43am UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/3 "2020-08-31T08:43:47Z")
![mender](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/1X/e9513728b9a258dc4bdb63cf80126710960dbe89.png) We are using self-hosted Mender Server. . The device is added already. The ip address is populated at `ipv4_enp2s0`. ---
**Author:** ![digupats](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/digupats/32/666_2.png) [@digupats](https://hub.mender.io/u/digupats)\ **Post date:** [September 4, 2020, 10:48am UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/4 "2020-09-04T10:48:24Z")
How can I deploy the mender update on device via USB stick (`.mender` file is copied on the usb stick)? ---
**Author:** ![oleorhagen](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/oleorhagen/32/297_2.png) [@oleorhagen](https://hub.mender.io/u/oleorhagen)\ **Post date:** [September 4, 2020, 11:21am UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/5 "2020-09-04T11:21:03Z")
Like [this](https://docs.mender.io/artifact-creation/standalone-deployment#deploy-an-artifact-to-a-device) 🙂 ---
**Author:** ![digupats](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/digupats/32/666_2.png) [@digupats](https://hub.mender.io/u/digupats)\ **Post date:** [September 4, 2020, 12:36pm UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/6 "2020-09-04T12:36:30Z")
Thank you. When I searched for `mender -help` , it does not show me flag `install` . But it shows the flag `rootfs`. Can I use command `mender -rootfs ` instead? The version is `1.7.1` ---
**Author:** ![dellgreen](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/dellgreen/32/85_2.png) [@dellgreen](https://hub.mender.io/u/dellgreen)\ **Post date:** [September 4, 2020, 12:54pm UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/7 "2020-09-04T12:54:40Z")
yes, it got renamed at some point. I have successfull used the -rootfs and -install options to do exactly what you are after 🙂 ---
**Author:** ![oleorhagen](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/oleorhagen/32/297_2.png) [@oleorhagen](https://hub.mender.io/u/oleorhagen)\ **Post date:** [September 4, 2020, 1:09pm UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/8 "2020-09-04T13:09:34Z")
Yup, just look up `1.7` in the doc 😉 [https://docs.mender.io/1.7/architecture/standalone-deployments#deploy-an-artifact-to-a-device](https://docs.mender.io/1.7/architecture/standalone-deployments#deploy-an-artifact-to-a-device) ---
**Author:** ![digupats](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/digupats/32/666_2.png) [@digupats](https://hub.mender.io/u/digupats)\ **Post date:** [September 7, 2020, 11:48am UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/9 "2020-09-07T11:48:49Z")
I was able to deploy the update using command `mender -f -rootfs ` ( After this error: `Installation failed: installer: failed to read and install update: will not install artifact with state-scripts when installing from cmd-line. Use -f to override module=rootfs`) . But it stopped all running docker applications, services running on the device (already provisioned device). How can I achieve standalone deployment without affecting affecting/ modifying existing device configuration? When I ran managed deployment with same `.mender` file, it worked successfully though. ---
**Author:** ![drewmoseley](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/drewmoseley/32/47_2.png) [@drewmoseley](https://hub.mender.io/u/drewmoseley)\ **Post date:** [September 8, 2020, 8:14pm UTC](https://hub.mender.io/t/required-firewall-settings-for-mender/2369/10 "2020-09-08T20:14:16Z")
You will need to arrange for the docker containers and settings to be stored in the /data partition and referenced from there by docker. When you do a full rootfs update you are completely replacing the root filesystem so any state that is stored in the rootfs will be replaced. Drew