Network Communication
Total Page:16
File Type:pdf, Size:1020Kb
NETWORK COMMUNICATION This page provides a complete list of the ports and protocols that must be enabled on firewalls in order to ensure YSoft SafeQ 6 system functionality. NETWORK COMMUNICATION OVERVIEW Workstation to server communication (server inbound rules) Required? Typ Port Communicati Description e on type (communication from the data volume user) Mandatory TCP 80/443 HTTP/HTTPS For access to the YSoft SafeQ administration/reporting web interface Mandatory TCP 9090/9443 HTTP/HTTPS For access to the End User UI web interface Optional TCP 9100 proprietary Job reception from client compressed workstations (TCP/raw (if using a workstation 10 kB–1 GB communication) client) per print job Optional TCP 515 LPR Job reception from client 10 kB–1 GB workstations (LPR) (If spooling on a per print job server) Optional/Recommend TCP 19898 JMX Management Service system ed from Localhost health monitoring via JConsole (monitoring only) Configurable by the cmlJmxServerPort propert y in YSoft SafeQ system settings. Optional/Recommend TCP 9696/9002 JMX Management Service LDAP ed from Localhost replicator system health monitoring via JConsole (monitoring only) Optional/Recommend TCP 9898 JMX SpoolerController system ed from Localhost health monitoring via JConsole (monitoring only) Required? Typ Port Communicati Description e on type (communication from the data volume user) SpoolerController only: Configurable by the orsJmxServerPort propert y in YSoft SafeQ system settings Optional/Recommend TCP 9999 JMX SpoolerController group ed from Localhost system health monitoring via JConsole (monitoring only) Optional/Recommend TCP 9000 JMX Management Service auxiliary ed from Localhost internal port used by JMX server Management service only: Configurable by the jmxRmiServerPort propert y in YSoft SafeQ system settings Optional/Recommend TCP 19044 JMX The SpoolerController group ed from Localhost service auxiliary internal port used by JMX server Optional/Recommend TCP 4000 HTTP/HTTPS Communication between ed from Localhost Terminal Server and Workflow Processing System Optional TCP 5559 YMQ Communication between Non–spooling FlexiSpooler (If spooling on a and Spooling FlexiSpooler server) Mandatory on Site TCP 5555 YMQ Communication between Server FlexiSpooler (and its Desktop Interface) to Spooler Controller Mandatory for a TCP 137/139/44 SMB Shared folder for uploading FlexiSpooler shared 5 jobs UDP folder 137/138 Server to Printer Communication (Server Outbound Rules) Required? Typ Port Communicatio Description (communication from e n type the user) data volume Optional TCP 631/80 IPP Jobdata delivery to printer (IPP) (required with server spooling) Optional TCP 9100 RAW Job data delivery to printer (Raw (required 10 kB–1 GB per TCP) with server print job spooling) Optional TCP 80/443 IPP/SSL Job data delivery to printer (IPP over (if using 10 kB–1 GB per SSL) print data print job encryption) Optional TCP 515 LPR Job data delivery to printer (LPR) (if using 10 kB–1 GB per LPR print job backend) Optional TCP 9100 proprietary SSL Job data delivery to printer (if using 10 kB–1 GB per (compressed via YSoft SafeQ print data print job Terminal Professional) encryption) Optional UDP 64099 proprietary YSoft SafeQ Terminal Professional / broadcast UltraLight discovery (only within one subnet) Optional TCP 4095 proprietary YSoft SafeQ Terminal Professional / UltraLight remote configuration Mandatory TCP 50001/5000 proprietary WS Embedded (KM, Xerox, Sharp) for 3 SSL remote configuration embedded terminals Mandatory TCP 80, 443, proprietary YSoft SafeQ Embedded Terminal for with YSoft 8080, 51443 Ricoh installation and automatic SafeQ configuration used by RXOP 64098 Embedded libraries Required? Typ Port Communicatio Description (communication from e n type the user) data volume Terminal YSoft SafeQ Embedded Terminal for for Ricoh Ricoh configuration Mandatory UDP 161 SNMP Online accounting of network printer for online MFD print/copy tracking Mandatory TCP 49629, HTTP/HTTPS YSoft SafeQ Embedded Terminal for with YSoft 49630 Toshiba installation SafeQ Embedded Terminal for Toshiba Mandatory TCP 80, 443 HTTP/HTTPS YSoft SafeQ Embedded Terminal for with YSoft Xerox/Fuji–Xerox installation SafeQ Embedded Terminal for Xerox/Fuji –Xerox Mandatory TCP 80, 50003 HTTP, YSoft SafeQ Embedded Terminal for with YSoft proprietary WS Konica Minolta installation SafeQ SSL Embedded Terminal for Konica Minolta Mandatory TCP 80/443 HTTP/HTTPS YSoft SafeQ Embedded Terminal for with YSoft Sharp installation and during SafeQ authentication on terminal Embedded Terminal for Sharp Mandatory TCP 80 HTTP YSoft SafeQ Embedded Terminal for with YSoft Samsung installation SafeQ Required? Typ Port Communicatio Description (communication from e n type the user) data volume Embedded Terminal for Samsung Mandatory UDP 161 SNMP YSoft SafeQ Embedded Terminal for YSoft installation MFD check SafeQ Embedded Terminal installation Mandatory TCP 80, 21 HTTP, FTP YSoft SafeQ Embedded Terminal for with YSoft Lexmark installation SafeQ Embedded Terminal for Lexmark Mandatory TCP 7627 HTTPS YSoft SafeQ Embedded Terminal for with YSoft HP installation SafeQ Embedded Terminal for HP Mandatory TCP 80, 443 HTTP/HTTPS YSoft SafeQ Embedded Terminal for with YSoft Epson installation SafeQ Embedded Terminal for Epson Optional TCP >1023 FTP Range of ports for active FTP - Active transfers (choice of passive/active FTP FTP made by MFD, range of port on transfers MFD side controlled by MFD, range of ports on server side defined by (for operating system - embedded e.g. https://support.microsoft.com/cs terminal -cz/help/929851/the-default- scanning) Required? Typ Port Communicatio Description (communication from e n type the user) data volume dynamic-port-range-for-tcp-ip-has- changed-in-windows-vista) Mandatory TCP 22 SSH Manages configuration of Terminal with Pro 4/eDEE/SafeQube/FlexiSpooler Terminal during terminal installation Pro 4 (communication Site Server to HW appliance) Printer to server communication (server inbound rules) Required? Type Port Communication Description (communication from type the user) data volume Mandatory with TCP 4096 Proprietary SSL Terminal Professional/UltraLight Terminal authentication and session control low volume, low Professional / latency Ultralight Optional UDP 37 Time protocol Time synchronization between a Terminal Professional and the server. (if using time When the system synchronization parameter timeServerEnable is with a Terminal enabled, the server is listening on Professional) UDP port 37. The terminal connects to this port upon restart. Mandatory with TCP 5021, HTTP/HTTPS YSoft SafeQ Terminal Application all embedded 5022 communication, YSoft SafeQ Mobile terminals, Terminal. Terminal Pro 4 and Mobile Terminal except YSoft SafeQ Embedded Terminal for KM native and YSoft SafeQ Embedded Terminal for Samsung Required? Type Port Communication Description (communication from type the user) data volume Mandatory with TCP 5011, HTTP/HTTPS Vendor-specific web services YSoft SafeQ 5012 Embedded Terminal for Sharp, Toshiba, Xerox and Fuji-Xerox Mandatory with TCP 5012 HTTP/HTTPS Accounting and charging YSoft SafeQ Embedded Terminal for Ricoh Mandatory with TCP 5014– WS SSL YSoft SafeQ Embedded Terminal YSoft SafeQ 5019 (KM) authentication and session low volume, low Embedded control latency Terminal for KM Mandatory with TCP 5025 HTTP/HTTPS Webservices for YSoft SafeQ YSoft SafeQ Embedded Terminal (HP) Embedded Terminal for HP Mandatory with TCP 5023, HTTP/HTTPS Webservices for YSoft SafeQ YSoft SafeQ 5024 Embedded Terminal (Epson) Embedded Terminal for Epson Mandatory with TCP 389 LDAP Internal LDAP for YSoft SafeQ YSoft SafeQ Embedded Terminal for Toshiba Embedded When 389 is blocked (by an already Terminal for running AD on a domain controller), Toshiba YSoft SafeQ 6 installer will display a warning and use 390 port instead Optional TCP 25 SMTP Scanning from MFDs via email (if using scan (optional, depending on MFD via SMTP) capabilities) Required? Type Port Communication Description (communication from type the user) data volume Mandatory for TCP 5610 Secured Scanning from MFDs via scan WebDAV WebDAV/HTTPS workflow (optional, depending on scanning MFD capabilities, configurable bywebdavPort ) Optional TCP 139 SMB Scanning from MFDs via scan to (if using scan folder (optional, depending on MFD via SMB) capabilities) Mandatory for TCP 21 FTP Scanning from MFDs via scan to embedded folder (optional, depending on MFD terminal capabilities, configurable by ftp-port ) scanning Optional— TCP >1023 FTP Range of ports for passive FTP Passive FTP transfers (choice of passive/active transfers FTP made by MFD, range of ports on MFD side controlled by MFD, range of (for embedded ports on server side inherited by YSoft terminal SafeQ from the operating system - scanning) see https://support.microsoft.com/cs- cz/help/929851/the-default-dynamic- port-range-for-tcp-ip-has-changed-in- windows-vista) Mandatory TCP 5555 proprietary 1 Communication between Spooler kB—per request Controller, Terminal Server and Payment System SafeQ TCP 7348 HTTP/HTTPS Updates, heartbeat and other infrastructure communication of Terminal Pro service 4/eDEE/SafeQube/FlexiSpooler (communication from HW appliances to Site Servers) Inter–server communication (inbound and outbound rules) Required? Type Port Communication type Description data path (communication from the user) Mandatory for TCP 4099 Management Service Application–level cluster Management > Management synchronization Service Required?