Crestron 3 Series Reference Manual page 40

Firewall Rules in Normal Operation
Under normal operating procedures, the firewall on the control system router
behaves as follows.
Control System Firewall Rules - Normal Operation
DIRECTION
Inbound from LAN
Inbound from LAN
Inbound from LAN
Inbound from LAN
Inbound from LAN
Inbound from LAN
Inbound from LAN
Control Subnet
outbound to LAN
Inbound from LAN
Firewall Rules in Isolation Mode
Under normal operating procedures, the firewall on the control system router
behaves as follows.
Control System Firewall Rules - Isolation Mode
DIRECTION
Inbound from LAN
Inbound from LAN
Inbound from LAN
Inbound from LAN
Inbound from LAN
Inbound from LAN
Inbound from LAN
Control Subnet
outbound to LAN
Inbound from LAN
36 • 3-Series Control Systems
PORT(S) RULE
20, 21 To CPU
22 To CPU
80, 443 To CPU
843 To CPU
41794-41797 To CPU
Listen ports To CPU
used by
program
To devices
64000-64299
on control
system
Any port Allowed
User-
User-defined
defined
PORT(S) RULE
20, 21 To CPU
22 To CPU
80, 443 To CPU
843 To CPU
41794-41797 To CPU
Listen ports To CPU
used by
program
64000-64299 Blocked
All other
Any port
devices:
Blocked
User-defined Blocked
DESCRIPTION
FTP (if enabled)
SSH
Web server (if enabled)
Flash policy server (if enabled)
Crestron communication protocols
Programmatic listeners
Allows Crestron management tools to access
devices on the Control Subnet; ports are
opened and closed as needed
All outbound traffic is allowed
Allows manual port forwarding to devices on
Control Subnet
DESCRIPTION
FTP (if enabled)
SSH
Web server (if enabled)
Flash policy server (if enabled)
Crestron communication protocols
Programmatic listeners
In isolation mode, Crestron management
tools cannot connect to any devices on the
Control Subnet
No outbound traffic is allowed
In isolation mode, no port forwarding can be
managed by the user
Reference Guide – DOC. 7150B