BluSKY Network Port Requirements
Overview
This article defines the BluSKY outbound network port and domains that must remain open to allow BluSKY to communicate with specific local hardware.
Access Control
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| 80, 443 | *.blub0x.com | |||
| 3010-3033 | blub0x.cloudapp.net | |||
| 443 | *.azurewebsites.net |
( ' * ' means all sub-domains of this domain.)
Video
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| 443, 9354 | *.servicebus.windows.net | |||
| 443 | *.blob.core.windows.net | |||
| 443, 9354 | *.windows.net | |||
| 5544 | *.show-box-app.com/ | |||
| *.ipify.org/ |
( ' * ' means all sub-domains of this domain.)
Where "wildcards" are not allowed
BluSKY
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| 443 | blub0xwebapi.cloudapp.net/ | Sound | ||
| 443 | blub0xwebapi.cloudapp.net/ | video clips and images, person photos | ||
| 443 | blub0xfiles.blob.core.windows.net | |||
| 443 | blub0xvideos.blob.core.windows.net | |||
| 443 | bbsignalrhub.cloudapp.net/ | Real time control | ||
| 443 | BluSKY.BluB0X.com | |||
| 443 | blub0x.azurewebsites.net – BluSKY.BluB0X.com | |||
| 443 | prod-azuresync.azurewebsites.net/ | DataSync for local servers and Person Readers | ||
| 3010-3033, 443, 80 | blub0x.cloudapp.net/ | VM which runs Mercury and Life Safety Power instances as well as Server Manager | ||
| 443 | milestonecamerachangesprocessor.cloudapp.net/ | |||
| 443 | prodvideoserver.cloudapp.net/ | |||
| 443, 80 | videoservices.cloudapp.net/ | |||
| 443, 80 | cloudlogger.cloudapp.net/ | |||
| 5671, 5672, 9350-9354, 443 | blusky-datachanges.servicebus.windows.net | |||
| 5671, 5672, 9350-9354, 443 | blusky-eventslogsandactivities.servicebus.windows.net | |||
| 5671, 5672, 9350-9354, 443 | server-management.servicebus.windows.net |
DDE Server
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
Power Management Gateway
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| 3010-3033, 443, 8 | blub0x.cloudapp.net/ | VM which runs Mercury and Life Safety Power instances as well as Server Manager. |
Local Server - DSR (Wireless Lock)
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| TBD |
Local Server - NDE
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| TBD |
Salient VMS
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| TBD |
API
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| 443 | web API | blub0xwebapi.cloudapp.net/ | Person Reader |
Person Reader - Intercom
For Person Reader when used as an intercom the following port are required.
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| 10000-20000 | UPD | portsip1.blub0x.com | ||
| 5060 | UPD | portsip1.blub0x.com | ||
| 5061 | TCP | portsip1.blub0x.com | ||
| 4000-5999 | UPD | portsip1.blub0x.com | ||
| 443 | TCP | portsip1.blub0x.com | ||
| 5062 | TLS | portsip1.blub0x.com | ||
| 5065 | WSS | portsip1.blub0x.com | ||
| 5671, 5672, 9354, 443 | blusky-raweventslogsandactivities.servicebus.windows.net |
Video
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| 443 | milestonecamerachangesprocessor.cloudapp.net/ | |||
| 443 | prodvideoserver.cloudapp.net/ | |||
| 443, 80 | videoservices.cloudapp.net/ | Milestone |
Milestone VMS - Client Components (outbound connections) XProtect Smart Client, Protect Management Client, Milestone Mobile server
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| 80 | HTTP | Management server service | Authentication | |
| 443 | HTTPS | Management server service | Authentication | |
| 7563 | TCP | Recording Server Service | Retrieving video and audio streams, PTZ commands | |
| 22331 | TCP | Event Server service | Alarms |
Milestone VMS - Web Client, Milestone Mobile Client
| Port Number | Protocol | Process | Connection to... | Purpose |
|---|---|---|---|---|
| 8081 | HTTP | Milestone Mobile server | Retrieving video and audio streams. | |
| 8081 | HTTPS | Milestone Mobile server | Retrieving video and audio streams. |
Milestone VMS - Management Server Services and Processes:
| Port Number | Protocol | Process | Connections from | Purpose |
|---|---|---|---|---|
| 80 | HTTP | IIS | All XProtect components. | Main communication, for example, authentication and configurations |
| 443 | HTTP | IIS | Xprotect Smart Client and the Management Client. |
Authentication of basic users. |
| 6473 | TCP | Management Server service | Management Server tray controller, local connection only. | Showing status and managing the service. |
| 7475 | TCP | Management Server service | Windows SNMP Service |
|
| 8080 | TCP | Management server | Local connection only | Communication between internal processes on the server. |
| 9993 | TCP | Management Server service | Recording Server services | Authentication, configuration, token exchange. |
| 12345 | TCP | Management Server service | XProtect Smart Client |
|
Recording Server Services:
| Port Number | Protocol | Process | Connection from... | Purpose |
|---|---|---|---|---|
| 25 | SMTP | Recording Server Service | Cameras, encoders, and I/O devices. |
Listening for event messages from devices. The port is disabled per default. |
| 5210 | TCP | Recording Server Service | Failover recording servers. | Merging of databases after a failover recording server had been running. |
| 5432 | TCP | Recording Server Service |
Cameras, encoders, and I/O devices. |
Listening for event messages from devices. |
| 7474 | TCP | Recording Server Service | Windows SNMP service |
|
| 7563 | TCP | Recording Server Service | XProtect Smart Client, Management Client. | Retrieving video and audio streams, PTZ commands. |
| 8966 | TCP | Recording Server Service | Recording Server tray controller, local connections only. | Show status and managing the service. |
| 11000 | TCP | Recording Server Service | Failover recording servers | Polling the state of recording servers. |
| 65101 | UDP | Recording Server Service | Local connection only | Listening for event notifications from the drivers. |
Remote Servers
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| 5671 | AMQP | Remote Server | BluSKY | Update software on system |
| 443 | HTTPS | Remote Server | BluSKY | Update software on system |
PC's
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| TBD |
License Scanners
| Port Number | Protocol | Process | Connections to... | Purpose |
|---|---|---|---|---|
| TBD |
LVSM Ports
| Service | Destination | Protocol | Port | LVSM Version |
|---|---|---|---|---|
| BluSKY | blusky.blub0x.com | TCP | 443 | v2 |
| Service Bus | blusky-datachanges.servicebus.windows.net | TCP | 5671.5672.9350-9354.443 | v2 |
| Service Bus | blusky-eventslogsandactivities.servicesbus.windows.net | TCP | 5671.5672.9350-9354.443 | v2 |
| Azure Blob Storage | blub0ximage.blob.core.windows.net | TCP | 443 | v2 |
| Azure Blob Storage | blub0xfiles.blob.core.windows.net | TCP | 443 | v2 |
| Cloud Video | vs*.blub0x.com | TCP | 443 | v2 |
| Cloud Video | vs*.blub0x.com | TCP | 9988 | v2 |
| Cloud Video/HLS | vs*.blub0x.com | TCP | 8888 | v2 |
| Cloud Video | vs*.blub0x.com | TCP | 5544 | v2 |
| Cloud Video | vs*.blub0x.com | TCP | 8420 | v2 |
| Public IP Advertisement | stun.l.google.com | TCP/UDP | 19302 | v2, Not required since v2.1 |
| Service Bus | server-management.servicebus.windows.net | TCP | 5671,5672,9350-9354,443 | v2 |
| Security | blub0xservicebusauthority.azurewebsites.net | TCP | 443 | v2 |
| Video Licensing | *.evostream.com | TCP | 443 | v2 |
| Azure Redis Service | BluSKYVideo.redis.cache.windows.net | TCP | 6380 | v2 |
| Azure SignaIR Service | signalrhub.blub0x.com | TCP | 443 | v2 |
| Public IP checker | api.ipify.org | TCP | 443 | v2.1 |
Note: Items marked with (*) will have to be changed to match a customer's environment if they use their own setup
Specific Port requirements for local streaming
During local streaming browser accesses video from LVSM hence the users browser must have access to the following 2 ports.
Note: this not a request to open outgoing or incoming ports to internet.
| Service | Destination | Protocol | Port | LVSM Version |
| Coud Video/HLS | *.blub0xSecurity.com | TCP | 8889 | v2 |
| Cloud Video DownStream | *.blub0xSecurity.com | TCP | 8420 | v2 |