Quadrox WebCCTV Installation Manual - Manual (Page 28)

WebCCTV Installation Manual 28
Version 4.4 Series
2.3.6.2.2 Configuring firewall
General information about firewalls and their configuration is given in a previous section. The
most important notes are:
The following ports need to be opened for connections going towards the
WebCCTV:
1. TCP Port 80: Web application
2. TCP Port 1518: Control connection
3. UDP Ports 4096 till 4223: Video streaming
4. TCP Port 3389: Remote Desktop Connection (Optional). Frequently asked by
support when you have an issue).
5. TCP Port 5666: Q-Monitor service
RTP uses two UDP ports per stream (versus one in the old streaming format), one for
RTP (the video stream itself) and one for RTCP (QoS signal stream), limiting the
software to a maximum of 64 concurrent streams. This number can be limited (e.g. for
security purposes) or extended using the Settings > Network settings page. In that
case, Quadrox advises to open a number of spare ports to avoid switching issues, e.g.
4 ports extra. The first port in the range should be even.
Let’s apply this to the two situations in which a WebCCTV is accessed over the Internet.
The blue, yellow and red arrows in the following diagrams indicate the direction of the initial
network connection request, and thus the direction in which the ports should be opened in the
firewall.
Situation 1 – A user on a corporate network or at home behind a broadband router
wants to access a WebCCTV on the Internet
The user on a corporate network wants to access WebCCTV on the Internet. The main concern
is: will the corporate firewall allow the WebCCTV network traffic?