Skip to main content

What ports and URLs do I need to open on my Cerberus FTP Server?

Ian Butteriss
  • Updated

PORTS

For each file transfer protocol you are using with Cerberus, create a routing rule on your firewall or router to route incoming external traffic from the router to the machine hosting Cerberus:

Main Protocols

  1. FTP: port 21.
  2. FTPS: port 990.
  3. FTP passive port range: For encrypted passive mode FTP and FTPS traffic, forward the passive FTP port range, configurable in Cerberus at 'Server Manager' > 'Protocols' > 'FTP and FTPS', from the router or firewall to the machine running Cerberus FTP Server. For more information on passive mode, see What is the difference between Active and Passive FTP mode? and My IP address begins with 192.168.xxx.xxx. Is there anything special I have to do for people to see my FTP Server on the Internet?
  4. SFTP: port 22.
  5. HTTPS (Web Client, SSO & 'Check for Updates' feature): port 443.
  6. HTTP (Web Client): port 80. (only if you plan to redirect HTTP traffic to the HTTPS listener on port 443 For more information on redirecting, see Redirecting HTTP connections to HTTPS)

Optional services/integrations

  1. HTTPS Admin: port 8443 (optional): If you would like to use the browser-based Web Admin Console to manage Cerberus settings. For more information, see Remote Settings
  2. SMTP: If you wish to integrate Cerberus with your email, you will need the right port based on your email server requirements:
    - Port 25: Unencrypted
    - Port 465: TLS/SSL Encryption
    - Port 587: STARTTLS Encryption
  3. Active Directory:
    - TCP/UDP 135: Used for client to domain controller and domain controller to domain controller operations
     -TCP 139 and UDP 138: Used for File Replication Service between domain controllers
    - TCP/UDP 464: Used for password change requests within Kerberos, the native authentication protocol for Microsoft Active Directory
  4. LDAP:
    - TCP/UDP 389: Lightweight Directory Access Protocol (LDAP), which allows clients to access network resources (no SSL)
    - TCP/UDP 626: Lightweight Directory Access Protocol (LDAP), which allows clients to access network resources (SSL enabled)

SITES

If you would like to use the optional 'Check for Updates' feature of Cerberus FTP Server, you will need to allow internet access over port 443 and allow access to the following URL's/IP addresses:

Related articles

Comments

0 comments

Article is closed for comments.