[VSS] Which ports need to be enabled in your firewall to allow smooth communication between the VAST Security Station and other systems?

Question

Which ports need to be enabled in your firewall to allow smooth communication between the VAST Security Station and other systems?

Answer

The following list are the service ports used by the VSS software to communicate between the software and other systems

Mandatory Port lists

Port Number	Direction	Protocol	Purpose
3443	Inbound/Outbound	TCP	HTTPS connection for VSS clients/Matrix, VSS substations, iViewer, and external sources to connect to the VSS station.

Optional Port lists

Port Number	Direction	Protocol	Purpose
3939	Inbound/Outbound	UDP	Default port for OpenVPN tunnel.
17000	Inbound	TCP	Default port for VIVOTEK LPR Camera Data magnet.
3444	Inbound	TCP	Default port to receive TCP message alarm from external sources.
3454	Inbound/Outbound	TCP	HTTP connection for iViewer, data magnet sources, and RTSP connection.
4543	Outbound	TCP	RTSP connection for 3rd party integration. (only available in VSS versions before 1.5)

Default Port used to connect with VIVOTEK devices

Port Number	Direction	Protocol	Purpose
80	Inbound/Outbound	TCP	Default port configured on VIVOTEk cameras and Managed PoE Switch. Change according to camera's setup.
443	Inbound/Outbound	TCP	Default port configured on VIVOTEK ND/NV series NVR. Change according to NVR's setup.
5060	Inbound/Outbound	TCP	Default port configured on VIVOTEK Network Audio Speaker. Change according to speaker's setup.

Please note that the ports mentioned above are all default ports, if any of the ports are changed in the VIVOTEK devices/ONVIF devices/VSS Substations or ND Substation, the new port used must be allowed accordingly.