Stratocast™ firewall configuration for IP and ports - Stratocast™

series
Stratocast™
revised_modified
2018-07-18

Stratocast™ firewall configuration for IP and ports

To configure the Stratocast™ firewall, the ports must be open and redirected for firewall and network address translation purposes.

The following diagram provides an overview of the different ports that you must open for each application.

How Stratocast™ works

Legend
Encrypted video stream (TCP)
Encrypted communication 128-256 bit SSL or TLS (RSA or AES) and password authentication
H.264 video stream
Best Practice: Ensure that all the ports listed below are allowed outbound TCP connections in the firewall.
If your network policies require some outbound ports to be unlocked for only IP addresses, use the list below.
NOTE: The list of IP addresses is constantly growing as Genetec Inc. deploys more servers to accommodate new Stratocast™ accounts.

Refer to online help for more details.

Ports and IP addresses required to install IP video units and appliances on a network in Stratocast™

The following ports and IP addresses are required to install IP video units and appliances on a network.

Outbound TCP Port 80, 443, 8080, 8081

The following ports are required to communicate with Axis Dispatcher Service.
Destination IP
87.237.215.80
124.35.144.186
195.60.68.120
195.60.68.121
206.71.169.189

Outbound TCP Ports 21001 to 21050

Stratocast™ video streaming ports that ingest encrypted video from IP cameras.
Destination IP
13.68.18.198 40.114.150.12 104.47.145.223
13.70.86.203 40.123.54.112 104.208.167.17
13.81.123.205 52.168.23.247 137.116.219.15
13.90.250.206 52.170.88.30 137.117.73.68
13.94.138.133 52.175.152.235 137.117.200.42
23.97.166.213 52.177.201.0 137.117.248.128
23.101.208.113 52.178.67.49 168.63.8.124
40.68.185.159 52.191.14.245 191.232.33.81
40.74.138.245 52.228.44.124  
40.91.196.26 52.232.246.114  

Ports and IP addresses required to view video from a Stratocast™ camera on a network

The following ports and IP addresses are required to view video from a Stratocast™ camera on a network.

Outbound TCP Port 80, 443 to any IP

Best Practice: The Stratocast™ web frontend requires port 80 and 443 to be unlocked for any IP address.
Because Stratocast™ uses third-party identity services (Google, Microsoft and Yahoo) to authenticate users, Genetec Inc. has no way to define or predict which IP address Microsoft, Google and Yahoo uses to authenticate users. Those identity services have multiple instances worldwide and the server varies because they are based on the user location and load on the system.

Outbound TCP Port 943, 556, 5500, 4530, 18100 to 18200

The following Stratocast™ video streaming ports are required to receive video in a browser or mobile applications.

Destination IP
13.68.18.198 40.114.150.12 104.47.145.223
13.70.86.203 40.123.54.112 104.208.167.17
13.81.123.205 52.168.23.247 137.116.219.15
13.90.250.206 52.170.88.30 137.117.73.68
13.94.138.133 52.175.152.235 137.117.200.42
23.97.166.213 52.177.201.0 137.117.248.128
23.101.208.113 52.178.67.49 168.63.8.124
40.68.185.159 52.191.14.245 191.232.33.81
40.74.138.245 52.228.44.124  
40.91.196.26 52.232.246.114