Firewall Configuration

We strongly recommend that the FileHub virtual appliance be deployed behind a firewall. This guide provides guidance for how to configure the ports to open on your firewall.

The FileHub appliance must have at least some inbound and outbound connectivity to the public Internet, and that is detailed on this page as well.

Refer to the tables below when configuring your firewall for the list of ports which need to be opened.

Inbound Traffic (Public Internet) Port Requirements

Port

Description

ICMPv4

Used for verifying the server is up and accessible.

80

Used for non secure web GUI access to the application. Does not need to be made available publicly.

443

Used for secure Web GUI access to the application. Does not need to be made available publicly. Also used by the API.

21

Used for FTP access to the appliance. Does not need to be open if the FTP service is not used externally.

22

User for SFTP access to the appliance. Does not need to be open if the SFTP service is not used externally.

990

Used for FTPS access to the appliance. Does not need to be open if the FTPS service is not used Externally.

22001-22099

Used for FTP/FTPS data channels to the appliance. Does not need to be open if neither the FTP nor FTPS services are used Externally.

Inbound Traffic (Internal Network) Port Requirements

Port

Description

Required

ICMPv4

Used for verifying the server is up and accessible.

YES

80

Redirects to HTTPS port 443

YES

443

Used for secure Web GUI access to the application. Does not need to be made available publicly. Also used by the API.

YES

21

Used for FTP access to the appliance. Does not need to be open if the FTP service is not used externally.

NO

22

User for SFTP access to the appliance. Does not need to be open if the SFTP service is not used externally.

NO

990

Used for FTPS access to the appliance. Does not need to be open if the FTPS service is not used Externally.

NO

10022

Used for support sessions to the appliance. ( for support sessions SSH access is required running on port 10022 )

YES*

9002

Used to access the appliance manager web GUI ( for setup and management of the appliance )

YES*

22001-22099

FTP Passive Ports

NO

* These ports are needed for administering the system and should be locked down at the firewall.

Outbound Traffic Port Requirements

Port

Description

Required

80

Used to download updates from our servers

YES

443

Used to download updates from our servers

YES

53

DNS services to resolve names for updates

YES

Last updated

©2023 Orange Platform LLC dba SmartFile. All rights reserved.