Skip to main content

This article applies to version 6.

Other available versions:

Cloud | Version 5 | Version 4icon.qnmark.png

Available in:

StandardPremiumEnterprise
Small Business
Code42 Support

TCP and UDP ports used by the Code42 platform

Overview

The Code42 server, the Code42 app, and other products in your Code42 environment use certain network ports to function normally. If you have network connectivity issues with Code42 for Enterprise, verify that your firewall rules permit traffic over these ports.

Open only the necessary ports
As a best practice, configure firewalls to open only those ports required by your software.
Deny inbound traffic at all other ports.

Code42 server network ports

The following tables list the default Code42 server ports.

Inbound ports

In firewalls:

  • Open port 4287 for inbound requests from Code42 apps.
  • Open port 4285 for inbound requests from browsers and from Code42 apps version 6.5 and later.
  • Open 4282 and 4280 only in the rare cases where your server does not use TLS security.
Port forwarding
You can use port forwarding, also called port mapping, to avoid port conflicts and port restrictions within your Code42 environment and on other networks.
Port(s) Protocol Source Destination Description

4282

4287 (TLS)

TCP
  • LAN networks
  • Internet

Your authority server

  • Backup traffic from internal and external endpoints
  • Statistics and job status from internal and external endpoints
Your storage servers Backup traffic from internal and external endpoints
4280 (http)
4285 (https)
TCP
  • LAN networks
  • Internet
Your authority server and storage servers
  • Browser access to administration consoles, and to web restore to internal and external endpoints
  • For Code42 servers 6.5 and later deploying Code42 apps 6.5 and later, access for client deployment and customization.

Outbound ports

In firewalls:

  • Open ports 25, 53, 123, and 443 to let your Code42 servers send requests to mail, DNS, NTP (Network Time Protocol) servers, and the Code42 license server.
  • Open an LDAP or RADIUS port only if you use one of those services.
  • Open port 5432 only for a server that uses a PostgreSQL database.
    • Open 5432 if PostgreSQL resides at an IP address other than the server's address,
    • Or open 5432 if PostgreSQL and your server share the same address, but your firewall otherwise blocks connections to localhost.
Specific IPs
For specific IPs, contact our Customer Champions for Code42 for Enterprise support.
Port(s) Protocol Source Destination Description
25 TCP Your Code42 server Mail Server(s) SMTP services
53 UDP Your Code42 server DNS Server(s) DNS services
123 UDP Your Code42 server NTP Server(s) NTP services
443 TCP Your Code42 server

license1.code42.com

Code42 product license/subscription service

TCP Your Code42 server update1.code42.com

Managed appliance and monitored authority upgrade files

389 (LDAP)
636 (LDAPS)
TCP Your authority server LDAP or Active Directory Server(s) Integration with LDAP or Active Directory services
1812
1813
UDP Your Code42 server RADIUS Server(s) RADIUS services
5432* TCP Your Code42 server PostgreSQL Database service

Multi-server deployment ports

If you use multiple Code42 servers, most likely one authority server and one or more storage servers, then in the firewall that protects each server:

  • Open port 4288 both inbound and outbound, for server-to-server communications.
  • Open port 4286, both inbound and outbound, also for server-to-server communications.
  • Open 4283 only in the rare cases where your servers do not use TLS security.
Port(s) Protocol Source Destination Description

4283

4288 (TLS)

TCP

Your Code42 server

Your Code42 server Data balancing between Code42 servers
4286 TCP

Your Code42 server

Your Code42 server Statistics traffic between Code42 servers

Code42 app ports

Code42 apps use two or three outbound ports. In firewalls:

  • Open 4287 for outbound messages to your authority server.
  • Open 4282 only in the rare case that your server does not use TLS security.
  • If you use Code42 cloud storage, open port 443 for outbound messages.
  • The Code42 app and the Code42 service run on the same device.
    Open port 4243 only if your firewall otherwise blocks connections to local host.
Port(s) Protocol Source Destination Description

4282

4287 (TLS)

TCP LAN networks Your Code42 server(s) (Default) Communication from the device to Code42 server(s) in on-premises environments
443 TCP LAN networks Code42 cloud storage Communication from the device to storage in the Code42 cloud
42431 TCP Localhost Localhost (Default) Code42 app connecting to Code42 service

1If the default port is already in use when the Code42 app installs, the Code42 app uses some other available port. For a list of the ports that a running Code42 app uses, see the app.log file

Monitoring ports

Only apply firewall rules for monitoring if you use Code42's managed appliance monitoring.

Specific IPs
For specific IPs, sign in with a privileged account or contact our Customer Champions for Code42 for Enterprise support.
Port(s) Protocol Source Destination Description

10053
(Cloud OS only)

TCP Your Code42 server

Code42 Monitoring Address

Remote monitoring (Zabbix)

10051
(Pre-Cloud OS only)

TCP Your Code42 server

Code42 Monitoring Address

Remote monitoring (Zabbix)
22 TCP

Code42 Remote Access IP

Your Code42 server Remote SSH access from Code42 offices
4280
4284
4285
TCP

Code42 Remote Access IP

Your Code42 server Remote console access from Code42 offices
443
623
5900
TCP
UDP
TCP

Code42 Remote Access IP

Your authority server's IPMI Interface Remote IPMI access from Code42 offices
623 TCP Your authority server's IPMI Interface

Code42 Remote Access IP

Remote IPMI access from Code42 offices

Code42 for Enterprise cloud storage ports

If you use Code42 cloud storage, then in the firewall that protects your on-premises authority server:

  • Open port 4287 for both inbound and outbound messages.
  • Open 4282 only in the rare case that your server does not use TLS security.
  • Open port 443 for outbound messages.

The IP addresses vary with geographic regions. Contact  Code42 for Enterprise support with any questions about IP addresses.  

Port(s)

Protocol

Source

Destination

Description

4282

4287 (TLS)

TCP

Code42 US Datacenter

Your authority server

Statistics

443

4282

4287 (TLS)

TCP

  • Your authority server
  • LAN Networks

These port numbers apply to any Code42 Datacenter worldwide: US, Sydney, Dublin, Singapore, Amsterdam.

Cloud services

4285

TCP

  • Your authority server
  • LAN Networks

These port numbers apply to any Code42 Datacenter worldwide: US, Sydney, Dublin, Singapore, Amsterdam.

Web restore function