Network destinations
The external addresses a Citrix SecurSpaces™ deployment must reach, for firewall rules and air-gapped planning.
Version numbers on this page are for the 2026.9.4 release. Substitute the version you are installing.
Summary
| Destination | Purpose | Needed |
|---|---|---|
api.enterprise.strong.network:443 |
License verification and renewal | Continuously, unless you use an offline license |
| Docker Hub | The Strong Installer image | At install and upgrade time |
europe-docker.pkg.dev and regional mirrors |
Helm chart and container images | At install and upgrade time |
License server
| Item | Value |
|---|---|
| Address | api.enterprise.strong.network |
| Port | 443 |
| Purpose | Online license verification and renewal |
During installation the platform contacts the license server to validate the license and to issue a temporary token for the container image registry.
You can supply a signed license instead, by setting
platform.license in the Helm values to a base64-encoded license. It is applied automatically on deploy and upgrade.
Note:
For air-gapped environments, either allow the SecurSpaces controller to reach the license server through your firewall, or request an offline license for fully disconnected operation. See License.
Installer image
| Item | Value |
|---|---|
| Source | Docker Hub |
| Image | strongnetwork/strong_installer:2026.9.4 |
Helm chart
| Item | Value |
|---|---|
| Source | Google Artifact Registry |
| Primary | europe-docker.pkg.dev/strong-network-release/charts/ninjahchart:2026.9.4 |
| Mirrors | us-docker.pkg.dev, asia-docker.pkg.dev |
Container images
| Item | Value |
|---|---|
| Source | Google Artifact Registry |
| Primary | europe-docker.pkg.dev/strong-network-release/images |
| Mirrors | us-docker.pkg.dev, asia-docker.pkg.dev |
Choose the mirror closest to your cluster with the
--source-registry-region flag. See SDS CLI reference.
Service images
| Image |
|---|
cloud_editor_sidecar_proxy:2026.9.4 |
sn_enterprise_bundle:2026.9.4 |
Workspace image
| Image |
|---|
ws-images/cloud_editor_generic:2.3.9 |
This is the only workspace image the installer pushes. The tag comes from the installer's built-in default, which you can override with the
-w or --workspace-image-tag flag.
Additional workspace images
Citrix publishes further workspace images and example image definitions, covering IDEs and language toolchains beyond the default image.
| Source | Address |
|---|---|
| Example image definitions | github.com/strong-network/images |
| Prebuilt images | hub.docker.com/u/strongnetwork |
Important:
The installer does not push these images. It pushes only the service images and the single workspace image listed above. To use an additional image in an air-gapped deployment, pull it and push it to your own registry yourself, then add it as a container image.
See Container images for adding an image to a project, and Container image requirements for what an image must provide.