Balbix Forwarder Connector Guide

Overview

The Balbix Forwarder enables secure communication between Balbix Host Analyzer (HA) agents and the Balbix Cloud in environments where direct internet access is restricted. The Forwarder runs on a Balbix Data Aggregator (DA) deployed in Direct Access mode and facilitates secure, internal-to-cloud data forwarding.

Note: The Forwarder connector is only supported in Direct Access deployments. It is not available in Proxy mode.

How Balbix Uses Forwarder Data

Balbix aggregates endpoint asset data received via the Forwarder, analyzes it using AI models, and enriches it with contextual business and operational data. This enables:

• Coverage analysis: Identify endpoints not reporting directly to Balbix Cloud  

• Risk-based vulnerability prioritization  

• Asset-level and group-level risk quantification  

• Endpoint visibility even in isolated or secure environments  

Integration Summary

Prerequisites

1. DA must be installed and running in Direct Access mode.  

2. Ensure the following ports are open on the DA host:  

   • 2181 – internal communication  

   • 8443 – HA agent traffic  

3. You must have access to the Balbix Dashboard (D3) with permissions to add connectors.  

4. You should have endpoint access to install the Balbix HA.  

Create and Configure the Connector