Basic Firewall Information

When connecting ISONAS hardware devices to Pure Access™, the device (client) initiates the connection to the software. This setting is “Client Mode” for reader-controller devices (see figure 3 below).

Since the device initiates the connection out to Pure Access, minimal firewall configuration is needed. If your firewall is blocking outbound ports or ephemeral ports, then rules may need to be added to the firewall to ensure a connection can be made.

*An ephemeral port is a random port used to complete a TCP connection for the session (typically between 49152 and 65535). The port number is used only for that connection period and will change if the connection is reset. In most cases, this is not an issue, but it can become one if severe security restrictions are placed on a network.

ISONAS RC-03 and RC-04 reader-controller devices will initiate a connection on port 55533 and Pure Access will use an ephemeral port to complete the connection.

Figure 1 - RC-03 Example Connection

PowerNet™ IP-Bridge devices will initiate a connection on port 55533 and Pure Access will use ports 10001-10003 to complete the connection. IP-Bridges come in either two or three-door units.

• For a two-door unit, ports 10001 and 10002 will be used.
• For a three-door unit, the same ports are used in addition to 10003.
  

Figure 2 – IP-Bridge Example Connection

Figure 3 – Reader-controller Connections