Which ports and public IPs shall I allow through my company firewall?

TCP protocol

To enable the communication service between the Internet protocol and the COMBIVIS connect Manager, at least one of the following TCP ports of the remote services shall be set to open on the main servers of the Server Infrastructure. The ports listed below are set as default and can be accessed and viewed through the computer settings.

  • 80
  • 443
  • 5935

Furthermore, both the Runtime and router need to resolve the Infrastructure servers IP address through a dedicated domain name resolution server (DNS). To enable this process, the following ports shall be set to open:

  • TCP 53
  • UDP 53
The connection from clients to the Access Server uses TLS 1.2 with certificate authentication. Clients can use the default TCP 443 outgoing port or can be configured to use port 80 or 5935 (TLS is still in use), depending on which solution is best to comply with local IT policies. Clients automatically test available outgoing ports, but they can be configured to operate with a fixed port.
Note: Access Servers are redundant and fault tolerant.
Note: COMBIVIS connect Manager Tools and Runtime need to be able to connect to the following addresses:
  • ccas1.keb.de
  • ccas2.keb.de
  • ubiquityrs1.asem.it
  • ubiquityrs2.asem.it
  • ubiquityrs3.asem.it
  • ubiquityrs4.asem.it
  • ubiquityrs5.asem.it
  • ubiquityrs6.asem.it
  • ubiquityrs7.asem.it
  • combivisconnect.com
  • webapi.combivisconnect.com
  • help.combivisconnect.com

Remote devices and the router then search for any open port to establish a server connection and consequently an end-to-end connection.

These settings allow you to locate each device by its own IP address within the network through the COMBIVIS connect Manager Tools.
Note: See COMBIVIS connect Manager Tools for further information on this subject.

SSL/TLS protocol

All of the connections available in the COMBIVIS connect Manager are made through an SSL/TLS protocol, regardless of the port used for each connection. This protocol allows for a safe and private data transaction between the server and Runtime.

Note: Access Servers use an SSL server certificate signed by a Certification Authority (CA) to authenticate content transferred through web servers.

SNTP protocol

The UDP 123 port shall be set to open, to allow the clock synchronization through the SNTP protocol.