Network requirements
For deploying eLux® and management solutions, please make sure that the network requirements are implemented. Different products need different protocols and ports for the communication.
eLux
| Port | Type | Description | How to deactivate | Components | In/Out |
|---|---|---|---|---|---|
| ICMP | ping must be supported to verify the status of the eLux devices | eLux --> Scout Server | Incoming/Outgoing | ||
| 80 | TCP | Firmware update by using HTTP (and proxy port, if used) | eLux --> Web/File Server, serving the Images and packages. | Outgoing | |
| Best practice: Use HTTPS for a secure connection | |||||
| 443 | TCP | Firmware update via HTTPS/TLS | eLux --> Web/File Server, serving the Images and packages | Outgoing | |
| 443 | TCP | Onboarding via uPilot | eLux --> https://onboarding.unicon.com |
Outgoing | |
| 5900 | TCP | Mirroring eLux desktop | In Device configuration > Security, disable mirroring or uninstall VNC server from the X.Org package | Scout Console (VNC Client) --> eLux (VNC Server) | Incoming |
| 5902 | WebRTC (TCP, UDP) | Mirroring eLux desktop | In Config > Device configuration > Security, disable mirroring or uninstall VNC server | Scout Board UI (Web Browser) --> eLux (webrtcify --> VNC Server). | Incoming |
| End to end encrypted (WebRTC). High ports (UDP) are used by WebRTC for the data channels. | |||||
You can use the enterprise policy WebRtcUdpPortRange (Chrome v54+, Edge v77+) to restrict the local UDP port window (e.g. 10000-11999) |
|||||
| 22124 | TCP | Scout Keep Alive Service (optional) | eLux --> Scout Server | Outgoing | |
| 22125 | TCP | Scout Server (Scout Manager / TLS) | eLux --> SCG, eLux --> Scout Server, Scout Server/SCG --> eLux. | Incoming/Outgoing | |
| A certificate can be used with the TlsVerifyOption | |||||
| 22129 | TCP | VPN (SCG) | In SCG Admin Configuration > Gateways > Public port, you can change the port. | eLux --> SCG | Outgoing |
Note:
Depending on the application and the use-cases, other optional ports might be needed; like DNS, DHCP, TFTP, AD/Kerberos, SNMP, Wake on LAN, etc.
Scout Server
| Port | Type | Description | Components | In/Out |
|---|---|---|---|---|
| ICMP | ping must be supported to verify the status of the eLux devices | Scout Server --> eLux | Incoming/Outgoing | |
| 1433 | TCP | MS SQL Server | Scout Server --> SQL Server | Outgoing |
| 1434 | UDP | MS SQL Server (Browser service) | Scout Server --> SQL Server, Scout Board DBLayer --> SQL Server | Incoming/Outgoing |
| 22124 | TCP (HTTPS) | Scout Keep Alive Service offers an evaluation of configurable status messages of the managed devices. | eLux --> Scout Keep Alive service | Incoming |
| These status messages are called keep alive messages. | ||||
| This service runs on the Scout Server | ||||
| 22125 | TCP | eLux Endpoints (Scout Manager / TLS) | Scout Server --> eLux, eLux --> Scout Server | Incoming/Outgoing |
| 8083 (WSLPORT) | HTTPS | The Citrix License Server port - can be defined/changed during installation | Scout Server --> Citrix License Server | Outgoing |
Note: For details on the ports and firewall requirements, please see Citrix License Server
Scout Board
| Port | Type | Description | Components | In/Out |
|---|---|---|---|---|
| 1433 | TCP | MS SQL Server | Scout Board Database Layer --> SQL Server | Outgoing |
| 5902 | WebRTC (TCP, UDP) | Mirroring eLux desktop | Scout Board --> eLux (webrtcify --> VNC Server) | Outgoing |
| 22160 | TCP (HTTPS) | Scout Board HTTPS web application. Administrator can define a custom port during installation | Administrator --> Scout Board web UI | Incoming |
Scout Console (legacy)
| Port | Type | Description | How to deactivate | Components | In/Out |
|---|---|---|---|---|---|
| 1433 | TCP | MS SQL Server | Scout Console --> SQL Server | Outgoing | |
| 1434 | UDP | MS SQL Server (Browser service) | Scout Console --> SQL Server | Outgoing | |
| 5900 | TCP | Mirroring eLux desktop | In Device configuration > Security, disable mirroring or uninstall VNC server from the X.Org package | Scout Console (VNC Client) --> eLux (VNC Server) | Outgoing |
Scout Cloud Gateway (SCG)
| Port | Type | Description | Components | In/Out |
|---|---|---|---|---|
| 22125 | TCP (TLS) | Scout Server (Scout Manager / TLS) - during onboarding only | eLux --> SCG, SCG --> eLux | Incoming/Outgoing (if 2 network interfaces exist: External Interface) |
| 22129 | TCP | VPN (SCG) - can be changed in the SCG admin UI | eLux --> SCG | Incoming (if 2 network interfaces exist: External Interface) |
| 636 | TCP | AD Authentication (LDAP) | SCG --> LDAPS (AD) | Outgoing (if 2 network interfaces exist: Internal Interface) |