Ports used by Omnicast™ applications in Security Center

When Omnicast™ is enabled in your system, you need to create additional firewall rules to allow proper communication between Security Center and external IP video devices.

IMPORTANT: Exposing Security Center to the Internet is strongly discouraged without hardening your system first. Before exposing your system, implement the advanced security level described in the Security Center Hardening Guide to help protect your system from Internet threats. Alternatively, use a trusted VPN for remote connections.

The following table lists the default network ports used by Omnicast™ applications in Security Center. To view the network diagram, click here.

Application	Inbound	Outbound	Port usage
Archiver	TCP 555¹		Live and playback stream requests
	TCP 605¹		Edge playback stream requests
	TCP 5602¹		Telnet console connection requests
	UDP 6000-6500		Audio from client applications
	UDP 15000–19999²		Live unicast streaming from IP cameras
	UDP 47806, 47807	UDP 47806, 47807	Live video and audio multicast streaming
	TCP & UDP		Vendor specific ports for events and IP camera discovery
		TCP 80	HTTP port
		TCP 443	HTTPS port
		TCP 554	RTSP port
Redirector	TCP 560, 960³		Live and playback stream requests
		TCP 554	Communication with Media Router (Security Center Federation™)
		TCP 555	Communication with Archiver
		TCP 558	Communication with Auxiliary Archiver
		TCP 560, 960³	Stream requests to other redirectors
		UDP 6000-6500	Media transmission to client applications
	UDP 8000–12000	UDP 8000–12000	Media transmission to other redirectors
	UDP 47806, 47807	UDP 47806, 47807	Live video and audio multicast streaming
	UDP 65246	UDP 65246	Live video multicast streaming (Security Center Federation™)
Auxiliary Archiver	TCP 558		Live and playback stream requests
	UDP 6000-6500		Unicast media streams
	UDP 47806, 47807		Live video and audio multicast streaming
	UDP 65246		Live video multicast streaming (Security Center Federation™)
		TCP 554, 560, 960³	Playback stream requests
Media Router	TCP 554		Live and playback stream requests
Media Router		TCP 554	Federated Media Router stream requests
Media Gateway	TCP 654		Live and playback stream requests
	TCP 80, 443		Incoming stream requests from mobile and web clients
	UDP 6000-6500		Live video unicast streams
	UDP 47806, 47807	UDP 51914	Live video and audio multicast streaming
		TCP 554, 560, 960³	Live and playback video requests
Media processing applications (Privacy Protector™ and Camera integrity monitor)	TCP 754		Live video requests
	UDP 7000-7500		Live video unicast streams
	UDP 47806		Live video multicast streaming
	UDP 65246		Live video multicast streaming (Security Center Federation™)
		TCP 554, 560, 960³	Live and playback video requests
Omnicast™ Federation™		TCP 5001-5002	Connection to remote Omnicast™ 4.x systems.
Client applications (Security Desk and Config Tool)	UDP 6000–6200		Unicast media streams
	UDP 47806, 47807		Live video and audio multicast streaming
	UDP 65246		Live video multicast streaming (Security Center Federation™)
		TCP 554, 560, 960³	Live and playback video and audio requests
Client application (Config Tool)		Vendor-specific TCP and UDP ports	Unit discovery with the Unit enrollment tool

¹ Applies to servers hosting one Archiver role. If multiple Archiver roles are hosted on the same server, each additional role uses the next free port.

² You can have multiple Archiver agents on the same server. Each Archiver agent assigns a unique UDP port to each video unit it controls. To ensure that the UDP port assignment on a server is unique, each additional Archiver agent on the same server adds 5000 to its starting UDP port number. For example, the first Archiver agent uses ports 15000-19999, the second one uses ports 20000-24999, the third one uses ports 25000-29999, and so on.

NOTE: You can manually assign live streaming reception UDP ports from the Resource tab of the Archiver role.

³ TCP port 960 applies to new installations of Security Center 5.8, and upgrades from Security Center 5.5 to 5.8. Systems upgraded from Security Center 5.6 and Security Center 5.7 will continue to use TCP port 5004.