Download  Print this page

Advertisement

RADVISION Port Security
Reference Guide
Version 7.6

Advertisement

Table of Contents

   Summary of Contents for Samsung VC240

  • Page 1 RADVISION Port Security Reference Guide Version 7.6...
  • Page 2 © 2000-2011 RADVISION Ltd. All intellectual property rights in this publication are owned by RADVISION Ltd. and are protected by United States copyright laws, other applicable copyright laws and international treaty provisions. RADVISION Ltd. retains all rights not expressly granted. All product and company names herein may be trademarks of their registered owners.
  • Page 3: Table Of Contents

    SCOPIA Desktop ................page 21 • SCOPIA XT Desktop Server ..............page 26 • SCOPIA XT1000 ................. page 28 • SCOPIA VC240................... page 30 • SCOPIA Gateway................page 32 • 3G Gateway ..................page 34 • SCOPIA MCU ..................page 36 This document does not include details of ports required by additional servers such as LDAP , SQL, or Oracle servers.
  • Page 4: Scopia Elite Mcu

    SCOPIA Elite MCU SCOPIA Elite MCU 5000 Series Table 1-1 lists the ports supported by all the models in the SCOPIA Elite MCU 5000 Series, including SCOPIA Elite 5100 Series MCU and SCOPIA Elite 5200 Series MCU. Table 1-1 Ports Supported by SCOPIA Elite MCU 5000 Series Port Range Protocol Functionality...
  • Page 5 Table 1-1 Ports Supported by SCOPIA Elite MCU 5000 Series Port Range Protocol Functionality Direction Result of Blocking Port Description on Firewall 1719 RAS (UDP) RAS signaling Cannot communicate H.323 gatekeeper (configurable) with H.323 gatekeeper 1720 Q.931 (TCP) Q.931 signaling Both Cannot connect H.323 Any H.323 entity...
  • Page 6 Ports specific to the SCOPIA Elite 5100 Series MCU Table 1-3 lists the ports specific to the SCOPIA Elite 5100 Series MCU. Table 1-3 Ports supported by SCOPIA Elite 5100 Series MCU Port Range Protocol Functionality Direction Results of Description blocking port on firewall 12000-13200...
  • Page 7 Table 1-4 Ports supported by SCOPIA Elite 5200 Series MCU Port Range Protocol Functionality Direction Result of Description Blocking Port on Firewall 12000-13200 RTP/RTCP (UDP) RTP/RTCP video Both Cannot Any RTP/RTCP media enabled entity. (configure media - lower transmit / Every call uses two audio ports and six within this blade only...
  • Page 8: Scopia Video Gateway For Microsoft Lync

    SCOPIA Video Gateway for Microsoft Lync Table 1-5 lists the ports supported by SCOPIA Video Gateway for Microsoft Lync. Table 1-5 Ports supported by SCOPIA Video Gateway for Microsoft Lync Port Protocol/Use Functionality Direction Result of Blocking Description Port on Firewall FTP (TCP) Audio stream recording In Cannot record...
  • Page 9: Scopia Ecs Gatekeeper

    SCOPIA ECS Gatekeeper Table 1-6 Table 1-7 list the ports supported by the ECS. Table 1-6 ECS incoming port connections Port Range Protocol Functionality Direction Result of Description Blocking Port on Firewall FTP (TCP) File Transfer Both Cannot view FTP client/CDR server Protocol for logs or offline viewing...
  • Page 10 Table 1-6 ECS incoming port connections Port Range Protocol Functionality Direction Result of Description Blocking Port on Firewall 1024-5000 H.245 (TCP) H.245 routed Both No H.245 Any H.323 entity H.245 port (configure calls (except in The number of ports ECS needs for this within that Q.931 routed purpose is the maximum calls allowed by...
  • Page 11 Table 1-6 ECS incoming port connections Port Range Protocol Functionality Direction Result of Description Blocking Port on Firewall 12378 Alternate Synchronizatio Both No Alternate Alternate Gatekeeper (configurable) Gatekeeper n and Gatekeeper protocol negotiation functionality between Alternate Gatekeepers Table 1-7 ECS outgoing ports connections Port Range Protocol Functionality...
  • Page 12: Scopia Iview Management Suite

    TANDBERG Local Address Book Upgrading software Detecting LifeSize endpoints Downloading PathFinder Server logs Detecting and managing SCOPIA VC240 Telnet (TCP) Sony PCS address book, Both iVIEW Management Suite cannot use Sony element logs, MCM control and PCS address book feature. Cannot retrieve endpoint control.
  • Page 13 Table 1-8 Ports supported by iVIEW Management Suite (continued) Port Range Protocol Functionality Direction Result of Blocking Port on Firewall LDAP servers communication Both iVIEW Management Suite cannot work with DLAP Servers Tomcat/JBoss SSL iVIEW Management Suite cannot view iVIEW Management Suite web interface via HTTPS TCP/UDP Connection to Active Directory...
  • Page 14 Table 1-8 Ports supported by iVIEW Management Suite (continued) Port Range Protocol Functionality Direction Result of Blocking Port on Firewall 7800-7802 Used for iVIEW Management Both Redundancy functionality is not available. Configurable Suite redundant deployments, for master/slave data synchronization 8011 Provides web interface for Both iVIEW Management Suite client cannot...
  • Page 15: Scopia Pathfinder

    SCOPIA PathFinder SCOPIA PathFinder is SCOPIA Solution’s answer to firewall traversal. The SCOPIA PathFinder Server is an H.460 server, usually located in the DMZ, while the SCOPIA PathFinder Client is an H.460 client, typically located outside the enterprise firewall with the H.323 endpoint (Figure 1-1 on page 15).
  • Page 16 SCOPIA PathFinder Server Table 1-9 lists the inbound ports supported by SCOPIA PathFinder Server. Table 1-9 Inbound ports supported by SCOPIA PathFinder Server Port Range Protocol Functionality Direction Result of Blocking Port on Recipient Client or Firewall Server Type SSH/SFTP Initial Client to Cannot initialize the server,...
  • Page 17 Table 1-9 Inbound ports supported by SCOPIA PathFinder Server Port Range Protocol Functionality Direction Result of Blocking Port on Recipient Client or Firewall Server Type 3089 Media traversal Client to Cannot use UDP to traverse SCOPIA PathFinder SCOPIA media; can only use TCP to Client PathFinder traverse media.
  • Page 18 Note: When an H.323 endpoint (or other H.323 entity) within the enterprise connects to the SCOPIA PathFinder Server in the DMZ via the internal firewall (Figure 1-2 on page 18), you need to install a SCOPIA PathFinder Client within the enterprise, or use H.460-enabled endpoints. Otherwise you must open the internal firewall to the SCOPIA PathFinder Server (1024-65535).
  • Page 19 Table 1-10 Outbound ports supported by SCOPIA PathFinder Server Port Range Protocol Functionality Direction Result of Blocking Port on Recipient Client Firewall or Server Type 3089 Neighbor server SCOPIA Cannot traverse media to PathFinder Server media connection PathFinder neighbor server using UDP . Server to SCOPIA PathFinder...
  • Page 20 Note: As mentioned above, if there is a firewall between the H.323 client and the SCOPIA PathFinder Client, all ports must be opened in both directions (1024-65535). We therefore recommend no firewall between the endpoint and the SCOPIA PathFinder Client. Table 1-11 Outbound ports supported by SCOPIA PathFinder Client Port Range...
  • Page 21: Scopia Desktop

    SCOPIA Desktop The SCOPIA Desktop Server is typically located in the DMZ (Figure 1-3 on page 21). It therefore has two sides to its connections, one towards the internal enterprise network while the other is towards the public. Figure 1-3 Locating the SCOPIA Desktop Server in the DMZ Table 1-12 lists the ports that need to be opened on the SCOPIA Desktop Server’s connection to...
  • Page 22 Table 1-12 Ports to and from the SCOPIA Desktop Server connected to the internal network Port Range Protocol Direction Severity Functionality 1720 Outgoing Mandatory In deployments where the SCOPIA Desktop Server works in conjunction with the MCU only, this port range is used for establishing connection from the SCOPIA Desktop Server to MCU.
  • Page 23 Table 1-12 Ports to and from the SCOPIA Desktop Server connected to the internal network Port Range Protocol Direction Severity Functionality 10000-65535 Both Mandatory Media connection (RTP protocol) between the SCOPIA (Configure Desktop Server and the SCOPIA MCU or MVP , and between within this the SCOPIA Desktop Server and the SCOPIA Desktop Client.
  • Page 24 For point-to-point functionality that works directly between two SCOPIA Desktop Clients, open the ports in table Table 1-14. Table 1-14 Port Security for Point-to-Point functionality between SCOPIA Desktop Clients Port Range Protocol Direction Severity Functionality 5060 SIP UDP Both Recommended Only required for establishing direct SIP point-to-point connections between two SCOPIA Desktop Clients.
  • Page 25 Table 1-16 Ports supported on the XMPP server for connecting with the SCOPIA Desktop Server Port Protocol Direction Severity Functionality Result of Blocking in Range Application 5269 Incoming XMPP Server for supporting proxy From SCOPIA Desktop Server XMPP connections from SCOPIA Desktop Server for SCOPIA Desktop Clients.
  • Page 26: Scopia Xt Desktop Server

    SCOPIA XT Desktop Server Table 1-17 lists ports that need to be open on SCOPIA XT Desktop Server. Table 1-17 Ports supported by SCOPIA Desktop XT Server and Internal Network Port Range Protocol Direction Severity Functionality Incoming Optional GUI—The alternative is to configure the GUI to run on port 443.
  • Page 27 Table 1-18 Ports to and from the SCOPIA Desktop XT Server connected to the public internet Port Range Protocol Direction Severity Functionality 10000-65535 Both Recommended Media connection between the SCOPIA Desktop XT Server and Client. If not open, the connection will be tunneled via TCP (configure port 443 and performance will not be optimal.
  • Page 28: Scopia Xt1000

    SCOPIA XT1000 Table 1-19 lists ports that need to be open on SCOPIA XT1000. Table 1-19 Ports Supported by SCOPIA XT1000 Series Port number Protocol/ Functionality Direction Result of Blocking Port on Description/External Firewall Client TFTP (UDP) TFTP client or Both Cannot send or receive files Send or receive files via...
  • Page 29 Table 1-19 Ports Supported by SCOPIA XT1000 Series Port number Protocol/ Functionality Direction Result of Blocking Port on Description/External Firewall Client 3230-3287 RTP and RTCP H.323 and SIP Both No media exchanged in the Ephemeral UDP ports used (configurable) (UDP) media (audio, H.323 or SIP call.
  • Page 30: Scopia Vc240

    SCOPIA VC240 Table 1-20 lists ports that need to be opened between SCOPIA VC240 and network devices. Table 1-20 Ports supported by SCOPIA VC240 Port Protocol/Use Functionality Direction Result of Blocking Description on Firewall TCP (SSH) iVIEW Management Both iVIEW Management...
  • Page 31 Table 1-20 Ports supported by SCOPIA VC240 (continued) Port Protocol/Use Functionality Direction Result of Blocking Description on Firewall 1719 UDP (RAS) RAS signaling Both Cannot H.323 gatekeeper communicate with H.323 gatekeeper 1720 TCP (Q.931) Q.931 signaling Both Cannot connect Any H.323 entity H.323 calls...
  • Page 32: Scopia Gateway

    SCOPIA Gateway Table 1-21 Table 1-22 list the ports supported by the SCOPIA Gateway. Table 1-21 SCOPIA Gateway-supported ports—Incoming connections Port Range Protocol Functionality Direction Result of Blocking Description Port on Firewall FTP (TCP) File Transfer Protocol Both Cannot upgrade Upgrade Utility version or extract recordings...
  • Page 33 Table 1-21 SCOPIA Gateway-supported ports—Incoming connections (continued) Port Range Protocol Functionality Direction Result of Blocking Description Port on Firewall 12003-12951 (odd RTCP (UDP) For terminals connected Both Cannot open media H.323 entity numbers only) to the Gateway and not to the IVR.
  • Page 34: 3g Gateway

    3G Gateway Table 1-24 lists the ports supported by the 3G Gateway. Table 1-24 Ports Supported by the 3G Gateway Port Range Protocol Functionality Direction Result of Blocking Description Port on Firewall FTP (TCP); File Transfer Protocol Both Cannot upgrade Upgrade Utility in use version...
  • Page 35 Table 1-24 Ports Supported by the 3G Gateway (continued) Port Range Protocol Functionality Direction Result of Blocking Description Port on Firewall 6000-7000 RTP/RTCP RTP media Both Cannot Any H.323 or SIP media (configurable) (UDP); in use transmit/receive enabled entity media streams 12000-13000 RTP/RTCP RTP media...
  • Page 36: Scopia Mcu

    SCOPIA MCU SCOPIA MCU Blade Table 1-26 lists the ports supported by the SCOPIA MCU. Table 1-26 Ports Supported by SCOPIA MCU Port Protocol/Use Functionality Direction Result of Blocking Description Port on Firewall FTP (TCP) Audio stream recording Out Cannot record audio Upgrade Utility or FTP stream Server...
  • Page 37 Table 1-26 Ports Supported by SCOPIA MCU Port Protocol/Use Functionality Direction Result of Blocking Description Port on Firewall 3336 XML (TCP) MCU version 3 XML API Both Cannot use MCU Conference Control web Conference Control client terminal, iVIEW web user interface. Management Suite or Cannot use version 3 third-party controlling...
  • Page 38 Table 1-28 MVP-supported Ports (continued) Port Protocol/Use Functionality Direction Result of Blocking Description Port on Firewall 3340 Font file client For receiving extended Both Cannot work with Font client software (TCP) font files from the different fonts MCU. 10000-10575 RTP/RTCP RTP/RTCP media Both Cannot...
  • Page 39 www.radvision.com About RADVISION RADVISION (NASDAQ: RVSN) is the industry’s leading provider of market-proven products and technologies for unified visual communications over IP and 3G networks. With its complete set of standards based video networking infrastructure and developer toolkits for voice, video, data and wireless communications, RADVISION is driving the unified communications evolution by combining the power of video, voice, data and wireless –...

This manual is also suitable for:

Scopia series

Comments to this Manuals

Symbols: 0
Latest comments: