diff --git a/docs/Getting-started/FAQ.md b/docs/Getting-started/FAQ.md
index 9f33f8dc36..8d7f8d80f9 100644
--- a/docs/Getting-started/FAQ.md
+++ b/docs/Getting-started/FAQ.md
@@ -593,6 +593,14 @@ Check out the [documentation on running database migrations](../Deploying/Upgrad
 
 If you would like to manage hosts that can travel outside your VPN or intranet we recommend only exposing the "/api/v1/osquery" endpoint to the public internet.
 
+If you would like to use the Fleet CLI from outside of your network, the following endpoints will also need to be exposed for `fleetctl`:
+
+- /api/setup
+- /api/v1/setup
+- /api/osquery/*
+- /api/latest/fleet/*
+- /api/v1/fleet/*
+
 ### What is the minimum version of MySQL required by Fleet?
 
 Fleet requires at least MySQL version 5.7.