The following network ports must be available on your firewalls to support communication and traffic on FOD™ systems.
| GROUP | PRODUCTS | PORT | TRAFFIC | DESTINATION | DIRECTION | DESCRIPTION |
|---|---|---|---|---|---|---|
| AirWatch MDM | Gen5 Android/iPad So1o |
80 / 443 / 2001 | HTTP/s | 0.0.0.0/0 | Both | AirWatch Device Services. 2001 is mandatory for device provisioning. |
| Apple Push Notification Service | Gen5 iPad | 443 | HTTPS | 17.0.0.0/8 | Inbound | Used as a fallback on Wi-fi only, when devices are unable to communicate to APNs on port 5223. |
| 2195 | APNs | 17.0.0.0/8 | Outbound | Send notifications to APNs. | ||
| 2196 | APNs | 17.0.0.0/8 | Outbound | APN Feedback service | ||
| 5223 | APNs | 17.0.0.0/8 | Inbound | The port used to send messages from APNs to the Kiosk (iPad). | ||
| BugFender | Gen5 Android/iPad / Touch Screen | 80 / 443 | HTTP/s | *.bugfender.com | Outbound | Used for collecting application logs |
| Fitness On Demand | Gen5 Android/iPad / Touch Screen | 443 | HTTPS | api.liftbrands.com | Outbound | Provides API responses for FOD products |
| Provides CDN distribution for image and video content | ||||||
| 443 | HTTPS | cdn.fod247.com | Outbound | |||
| 80 / 443 | HTTP/s | *.fod247.io | Outbound | |||
| Google Firebase Cloud Messaging | Gen5 Android Gen5 iPad / Touch Screen |
443 | HTTPS | 0.0.0.0/0 | Inbound | FCM Cloud Messaging Servers |
| 5228-5230 | FCM | 0.0.0.0/0 | Both | FCM usually uses 5228, but it sometimes uses 5229 and 5230. FCM does not provide specific IPs, so you should allow your firewall to accept outgoing connections to all IP addresses contained in the IP blocks listed in Google's ASN of 15169. | ||
| Ooyala (Video Streaming) | Gen5 Android/iPad / Touch Screen | 80 / 443 | HTTP/s | *.ooyala.com | Both | Provides video streaming content |
| Brightcove (Video Streaming) | Gen5 Android/iPad / Touch Screen | 80 / 443 | HTTP/s | *.brightcove.com | Both | Provides video streaming content |
| Pushy | Gen5 Android/iPad / Touch Screen | 443 / 1883 | HTTPS / Pushy | *.pushy.me | Both | Provides device communication and control messaging system. |
| TeamViewer | Gen5 Android / Touch Screen | 80 / 443 | HTTP/s | *.teamviewer.com | Both | Teamviewer (hosted) |
| TCP/UDP 5938 | Screenshare | *.teamviewer.com | Both | Teamviewer remote desktop connection | ||
| AWS | Gen5 Android/iPad / Touch Screen | 80 / 443 | HTTP/s | *.amazonaws.com | Both | Used for authentication. |
| Touch Screen MDM | Touch Screen | 80 / 80 | tcp | 0.0.0.0/0 | both | HTTP public access (Internet) |
| Touch Screen | '-1 | 172.30.0.0/24 | both | Allow all protocols within VPC/subnet (intranet) | ||
| Touch Screen | 22 / 22 | tcp | 154.223.168.0/24 | both | SSH administration (corporate/office network) | |
| Touch Screen | 22 / 22 | tcp | 106.54.184.75/32 | both | SSH administration (corporate/office network) | |
| Touch Screen | 18083 / 18083 | tcp | 103.136.125.128/32 | both | EMQX Dashboard | |
| Touch Screen | 10050 / 10050 | tcp | 154.223.138.21/32 | both | Zabbix Agent (passive collection) | |
| Touch Screen | 443 / 443 | tcp | 0.0.0.0/0 | both | HTTPS public access (Internet) | |
| Touch Screen | -1 / -1 | icmp | 0.0.0.0/0 | both | Ping/ICMP diagnostics (Internet) | |
| Touch Screen | 9100 / 9100 | tcp | 119.28.8.0/24 | both | Node Exporter / metrics scraping | |
| Touch Screen | 9100 / 9100 | tcp | 43.132.230.0/24 | both | Node Exporter / metrics scraping | |
| Touch Screen | '-1 | 0.0.0.0/0 | Outbound | Allow all outbound traffic |
Comments
0 comments
Please sign in to leave a comment.