Configuring your firewall

The 7FiveFive NAS system can be configured in multiple ways to suit your environment, however, here is a list of ports that are needed for the most common system setup. We make the following assumptions:

Systems in the same subnet can communicate without any firewall configuration required

Inbound ports

Protocol	Port	Network/Interface	Description
TCP	21, 22	Management	SSH access
TCP	443	Management	Dashboard web access
TCP	445	Frontend	SMB
TCP	548	Frontend	AFP
TCP	623	Management	Out-Of-Band management
TCP	2463	Management	In-Band management
TCP	5900,5901	Management	Out-Of-Band management
TCP	9009	Management	NAS Agent communication

Outbound ports

Protocol	Port	Network/Interface	Description
TCP	21	Management	Out-Of-Band management
TCP	22	Management	SSH access
TCP	25, 587	Management, Frontend	Email Alerts
TCP & UDP	53	Frontend	DNS
TCP	80	Management	Out-Of-Band management
TCP & UDP	88	Frontend	Active Directory
UDP	111	Frontend, Backend	AD & File-system
UDP	123	Frontend	Active Directory
TCP	135	Frontend	Active Directory
UDP	137-139	Frontend	Active Directory
TCP	161-162	Management	SNMP
TCP & UDP	389	Frontend	Active Directory
TCP	443	Management	System updates
TCP	445	Frontend	File share access
TCP	623	Management	Out-Of-Band management
TCP	3268,3269	Frontend	Active Directory
TCP	4379	Backend	Cluster
TCP	5900,5901	Management	Out-Of-Band management
TCP	9009	Management	Agent
TCP	24007	Backend	File-system
TCP	10051	Management	Monitoring

The following outbound ports will be required to allow 7fivefive remote access and full pro-active monitoring.

Endpoint	Port	Protocol	Network	Description
licence.7fivefive.com	443	TCP	Management	NAS monitoring
monitor.7fivefive.com	1194	UDP	Management	7FiveFive Access
zabbix.7fivefive.com	443/10051	TCP	Management	Zabbix monitroing