Connector

  • Last validated: Jul 15, 2026

What a Connector is

A Connector is a dial-out component that establishes a secure, outbound-only tunnel between your internal network and the Global Edge Network.

Why you use a Connector

Publishing internal services normally requires opening inbound ports at your network edge, which increases exposure. A Connector removes that requirement: because it only initiates outbound connections, you can make internal services reachable through the Global Edge Network without opening any inbound ports in locations that lack a managed Access Tier.

How it works

  1. The Connector is deployed in a location that has connectivity to your internal services.
  2. It dials out and maintains a secure tunnel to the Global Edge Network, so no inbound ports need to be opened.
  3. Traffic flows from entities on the internet to the Access Tier, then through the Connector to the internal service.

Tip: To configure and deploy a Connector in your environment, see Install the Connector.

Overview

The Connector is a dial-out connector that establishes a secure tunnel with the Global Edge Network. The Connector can be deployed in any location that has connectivity to your internal services. Each Connector only connects outbound and does not need any inbound open ports to operate correctly. Note that when a Connector is used, traffic flows from entities on the internet to the Access Tier, and then through the Connector to the internal service.

Connector Install Walk-through

Connector installation features a self-service design: admins can configure, install, and deploy Connectors – in various environments, using various deployment methods – directly from the Command Center UI. This can be completed in two steps:

Configure
Install

Connector Statuses

There are four potential Connector statuses, defined below.

Reporting: The Connector has reported to the Command Center within the past 7 minutes and it has a connection established with each POP.

Partially Reporting: The Connector has reported to the Command Center in the past 7 minutes, but it is disconnected from at least one POP.

Terminated: The Connector has not reported to the Command Center within the past 7 minutes.

Pending: The Connector was created but has not reported into the Command Center to receive its configuration.

Sections

Install

Tarball Installer

Docker Container

Windows Executable

OVA Install

SonicOS Firewall as a Connector

Manage

Monitoring and Troubleshooting the OVA Connector

Set up High Availability

Was this page helpful?