.. _FirewallWithCloud:

Firewall Configuration for Devices Linking with Cloud
=======================================================

If the SyncSign Hubs are installed in your office network but are still unable to connect or update the displays, please check the following on your WiFi router or firewall:

Services by SyncSign (Outbound)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

+------------+---------+------------------------------------------------+----------------------------------+
| Protocol   | Port    | Destination Domain                             | Functions                        |
+============+=========+================================================+==================================+
| TCP        |  8883   | a1zjlbcv9qbzin-ats.iot.us-west-2.amazonaws.com | MQTT Remote Notification         |
+------------+---------+------------------------------------------------+----------------------------------+
| TCP        |  443    | api.sync-sign.com                              | SyncSign Device/Client API       |
+------------+---------+------------------------------------------------+----------------------------------+
| TCP        |  443    | sync.sync-sign.com                             | Device Health Report             |
+------------+---------+------------------------------------------------+----------------------------------+
| TCP        |  443    | update.sync-sign.com                           | OTA Update Server                |
+------------+---------+------------------------------------------------+----------------------------------+
| TCP        |  443    | file.sync-sign.com                             | Image Assets Resource Server     |
+------------+---------+------------------------------------------------+----------------------------------+
| TCP        |  80     | pub.sync-sign.com                              | Time Server (as failsafe to NTP) |
+------------+---------+------------------------------------------------+----------------------------------+

Basic Network Services (Outbound)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

+------------+---------+------------------------------------------------+----------------------------------+
| Protocol   | Port    | Destination Domain                             | Functions                        |
+============+=========+================================================+==================================+
| UDP        |  123    | pool.ntp.org, 0.asia.pool.ntp.org,             | NTP Time Synchronisation         |
|            |         | europe.pool.ntp.org, time.google.com,          |                                  |
|            |         | 0.north-america.pool.ntp.org                   |                                  |
+------------+---------+------------------------------------------------+----------------------------------+

Services by Data Sources (Outbound)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

+------------+---------+------------------------------------------------+----------------------------------+
| Protocol   | Port    | Destination Domain                             | Functions                        |
+============+=========+================================================+==================================+
| TCP        |  443    | www.googleapis.com                             | API of Google Calender/G-Suite   |
+------------+---------+------------------------------------------------+----------------------------------+
| TCP        |  443    | graph.microsoft.com                            | API of Office 365 Calendar       |
+------------+---------+------------------------------------------------+----------------------------------+

See also:

- :ref:`HubNetworkInbound`
- :ref:`FirewallWithSOPS`