Required firewall exceptions for EcoStruxure Building Activate and Flex Server.

[Mukesh_Sangwan]

Issue

There is a need to identify the Ports, URLs and Static IPs which must be open through customer's firewall for EcoStruxure Building Activate Flex Server and Partner Portal

Product Line

EcoStruxure Building Activate

Environment

• EcoStruxure Building Activate Flex Server
• EcoStruxure Building Activate Partner Portal

Cause

Ports, URLs and Static IPs list needed to create firewall exceptions for EcoStruxure Building Activate Flex Server and Partner Portal in order to keep them functioning correctly.

Resolution

Below are the list of ports, URLs and static IPs that must be open through a site's firewall/network:

URL	Port	Protocol	Usage
https://sentry.zenatix.com	443	TCP	Allows the gateway to upload error logs and diagnostics.
https://router.zenatix.com	443	TCP	Allows the gateway to download Linux & Python updates from the Zenatix Server. Regularly polls the Zenatix Server to check internet connectivity.
https://timesync.zenatix.com	9090	TCP	Time server allows the gateway system & gateway clock to remain synchronized with Zenatix Server.
https://gitlab.zenatix.com	443	TCP	Used for troubleshooting to update the gateway codebase from the Zenatix Server.
https://telemetry.zenatix.com	443	TCP	Used for sending IoT device data and gateway health data to the Zenatix Server.
https://emgx.zenatix.com	8883	TCP	Used for communication between gateways and Zenatix cloud services for getting configuration or alarms from Zenatix Server to gateway and vice versa.
54.169.200.193	1194	UDP	Allows Zenatix to remotely access and do API calls to the gateway through OpenVPN.
https://mender.zenatix.com	443	TCP	Used to download firmware updates to gateway from Zenatix Server.

1.