| 24
RADVISION | RADVISION Port Security Reference Guide
For point-to-point functionality that works directly between two SCOPIA Desktop Clients, open
the ports in table
Table 1-14
.
Table 1-15
lists the ports the STUN server uses when communicating with SCOPIA Desktop Clients.
Table 1-16
lists the ports that need to be opened on the XMPP presence server for connecting
with the SCOPIA Desktop Server in cases where these two servers reside on different machines.
Most deployments install these two servers on the same physical computer, but when they are on
different computers separated by a firewall, the ports listed in this table must be opened.
Table 1-14
Port Security for Point-to-Point functionality between SCOPIA Desktop Clients
Port Range Protocol
Direction
Severity
Functionality
5060
SIP UDP
Both
Recommended
Only required for establishing direct SIP point-to-point
connections between two SCOPIA Desktop Clients.
1025-65535 UDP Both
Recommended
Only
required
for establishing direct SIP point-to-point
connections between two SCOPIA Desktop Clients. If this is
blocked, calls will be routed through the SCOPIA Desktop
Server.
Table 1-15
STUN Server port required for access by SCOPIA Desktop Client
Port Range
Protocol Direction Severity
Functionality
3478
UDP
Incoming
Optional
The STUN access is for the SCOPIA Desktop Client to
communicate with the STUN Server. To acquire the true SIP
PTP, open the UDP ports (10000-65535, 6972-65535, 3478). If
the UDP ports are not open, the SCOPIA Desktop Client will
use the SCOPIA Desktop Server as a relay agent.
Table 1-16
Ports supported on the XMPP server for connecting with the SCOPIA Desktop Server
Port
Range
Protocol Direction
Severity
Functionality
Result of Blocking in
Application
389
TCP
Outgoing
Mandatory for
LDAP
authentication
If XMPP Server is configured for
LDAP server (either Active
Directory or Domino), XMPP
Server uses this port for LDAP
communication for user
authentication.
Users would not be able to log
into XMPP Server.
3336
TCP
Outgoing
Mandatory for
iVIEW
Management
Suite
authentication
If the XMPP Server is configured
for iVIEW Management Suite
authentication, it uses this port
for XML communications.
Users would not be able to log
into XMPP Server.
5222
TCP
Incoming
Recommended
Direct SCOPIA Desktop Client to
XMPP connection.
The SCOPIA Desktop Client tries
to use port 443 for tunnelled
connection to the SCOPIA
Desktop Server.
