The poller runs in the cloud, and private addresses are refused. You either reach the agent at a public address through a VPN or tunnel, or put a Hermetry Edge on the site network; the platform then reaches the UPS over Edge’s encrypted connection without port forwarding. Traps are only received on site by a licensed gateway, the cloud has no trap listener.