What ports does Director use?

Products

• Director

Issue/Introduction

What ports do I need to open in my firewall for Director?
If I use Port Address Translation (PAT), what ports do I need to forward for Director?

 

Resolution

With SGME 5.4.2 and later, the Director appliance uses the following ports:

• 8082 for accessing the Director Management Console and to enable Director to start the ProxySG Management Console
• 8085 and 8086 for registering devices
• (pre-version 6.1.12.1) 8085 for downloading the Java Network Launching Protocol (JNLP) application used to start the Management Console
• (version 6.1.12.1 and later) 8087 for downloading the JNLP application used to start the Management Console
  • During registration, ProxySG uses HTTPS to communicate with Director. Director in turn implements two web-services listening for registration requests at the following URLs:
  • https://directorIP:8086/cgi-bin/subjugate/subjugate
    https://directorIP:8085/cgi-bin/subjugate/subjugate-hmac.
• 22 for Secure Shell (SSH) access
• 23 for Telnet if Telnet is enabled (Telnet is disabled by default)
• 873 (UDP) for standby

The ports are used as follows:

• Director Management Console to Web browser on 8085 or 8087 (download the JNLP application)
• Director Management Console to Director on 22 (for general communication)
• Director Management Console to ProxySG on 8082 (for statistics only)
• Director Management Console to Director on 8082 (for Java WebStart launch)
• Director appliance to ProxySG on 8082 (getting updated Java Archive (.jar) files after a ProxySG upgrade)
• Director appliance to ProxySG on 22
• Director appliance to Director appliance on 873 (UDP) for standby
• Registration, ProxySG to Director appliance on 8085 and 8086