After installing the Industrial IoT plugin, ensure that the ports required to communicate with the types of devices you need are open on all network switch routers and firewalls, and that no other applications use these ports.
NOTE: There are no default ports for devices that connect through a TCP Server, HTTP Server,
or MQTT Client.
BACnet
| Computer | Inbound | Outbound | Port usage | Configurable |
|---|---|---|---|---|
| Security Center server that hosts the plugin role | UDP 47808 (default) | The port used by the device and plugin to communicate. | Yes | |
| BACnet device | UDP 47808 (default) | No |
Modbus
| Computer | Inbound | Outbound | Port usage | Configurable |
|---|---|---|---|---|
| Security Center | TCP 502 (default) | Communication with the devices. | Yes | |
| Modbus device | TCP 502 | Yes |
OPC Client
| Computer | Inbound | Outbound | Port usage | Configurable |
|---|---|---|---|---|
| Security Center | UDP 4840 (default) | Used by the OPC LDS service for the discovery devices. | Yes | |
| TCP 4840 | Yes | |||
| TCP 48250 (default) | Command and control communication for the plugin and OPC UA server. | Yes | ||
| OPC UA server | TCP 48250 (default) | Yes | ||
| UDP 4840 (default) | Used by the OPC LDS service for the discovery of devices. | Yes | ||
| TCP 4840 (default) | Yes | |||
| 48255 | Yes |
SNMP Client
| Computer | Inbound | Outbound | Port usage | Configurable |
|---|---|---|---|---|
| Security Center | UDP 162 | UDP 161 (default) | Listen for notifications (SNMP traps and informs) from SNMP devices. | UDP 161 is configurable. UDP 162 is not configurable. |
| SNMP device | UDP 161 (default) | UDP 162 | Poll objects on SNMP devices to get latest values and states. | UDP 161 is configurable. UDP 162 is not configurable. |
NOTE: A UDP port range can be configured for outbound ports to increase polling
performance.
HTTP Server
| Computer | Inbound | Outbound | Port usage | Configurable |
|---|---|---|---|---|
| Security Center | TCP 56789 | Listen for notifications from the HTTP clients. | Yes | |
| HTTP device | TCP 56789 | TCP 56789 | Send objects to the HTTP Server with latest values and states. | Yes |
TCP Server
| Computer | Inbound | Outbound | Port usage | Configurable |
|---|---|---|---|---|
| Security Center | Defined by user | Listen for notifications from TCP server. | Yes | |
| TCP device | Defined by user | Send objects to the TCP server with latest values and states. | Yes | |
| TCP Client | 42000 | Yes |
MQTT Client
| Computer | Inbound | Outbound | Port usage | Configurable |
|---|---|---|---|---|
| Security Center | Defined by user | Listen for topics from the MQTT broker. | Yes | |
| MQTT device | Defined by user | Yes | ||
| MQTT Client | 8883 | Yes |
Genetec™ Time Series
The port used by the Genetec Time Series is determined during the installation process. By default, the port is 9090.
PostgreSQL
The port used by PostgreSQL is determined during the installation process. By default, the port is 5432.