regional monitoring agent communication

[dragon2611]

Sorry if I missed it but is the communications between checkcle and the regional agents documented anywhere?

I'm mostly after the ports protocols so I know what needs to be allowed in ACL/Firewalls.

I know the agent makes an outbound connection to the http/https address of the checkcle main app, but is there any other communications initiated in the other direction (Given it asks for the IP of the agent when you set it up I'm guessing there might be),

For testing I just used netbird and set the netbird ACL to allow all TCP traffic towards the netbird IP of the machine running the regional agent from the machine running the main application and that seemed to work but I'd rather secure it properly.