Network ports

The following table lists the default network ports used by XenApp and XenDesktop Delivery Controllers, Windows VDAs, Director, and Citrix License Server.  When Citrix components are installed, the operating system's host firewall is also updated, by default, to match these default network ports.

You may need this port information:

• For regulatory compliance purposes.
• If there is a network firewall between these components and other Citrix products or components, so you can configure that firewall appropriately.
• If you use a third-party host firewall, such as one provided with an anti-malware package, rather than the operating system’s host firewall.
• If you alter the configuration of the host firewall on these components (usually Windows Firewall Service). 
• If you reconfigure any features of these components to use a different port or port range, and then want to disable or block ports that are not used in your configuration. Refer to the documentation for the component for details.

For port information about other components such as StoreFront and Provisioning Services, see the component's current "System requirements" article.

The table lists only incoming ports; outgoing ports are usually determined by the operating system and use unrelated numbers. Information for outgoing ports is not normally needed for the purposes listed above.

Some of these ports are registered with the Internet Assigned Numbers Authority (IANA).  Details about these assignments are available at http://www.iana.org/assignments/port-numbers; however, the descriptive information held by IANA does not always reflect today’s usage.

Additionally, the operating system on the VDA and Delivery Controller will require incoming ports for its own use.  See the Microsoft Windows documentation for details.

For Citrix Licensing: