Applies to versions: 1.8, 1.9, 1.10, 1.11, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 3.0, 3.1, 3.2

Ports Used by TimeIPS

On-site TimeIPS servers communicate via TCP/IP to update software, keep time synchronized and provide diagnostic functions. Listed below are the remote IP addresses and ports used. Standard firewall/router configurations usually allow access to external sites without any special configuration.  In locations with extremely tight network security, access to external IP addresses and ports may be limited to a special "whitelist" of known and authorized remote systems.  If this is the case for you, then please allow access to each of the items on the list that follows.  Different routers require different configuration techniques to allow these ports to be open. Please check with your router hardware provider for specific instructions on how to configure your specific router. Please note, the ports and IP addresses simply require that the port be open to allow TCP/IP traffic.  TimeIPS servers DO NOT require port forwarding rules or any access from the outside to your internal network.

Firewall/Router Ports (TCP outgoing) that need to be open:

These ports need to be open to allow traffic out to the Internet.

• 12.206.142.205 port 443 (HTTPS) to authenticate for updates and off-site backups.
• 12.206.142.219 port 123 (NTP) Recommended for time synchronization. Note: NTP requires UDP, not TCP.
• 12.206.142.219 port 9444 (and alternatively 443 HTTPS) to download updates and make off-site backups.
• 12.206.142.221 port 9443 (and alternatively 443 HTTPS) to enable interactive troubleshooting and assistance from TimeIPS Support.
• 65.254.227.224 port 80 (HTTP) Recommended. For faster update speeds.
• Port 53 (DNS) Required for name resolution.
• Port 25 (SMTP) Required for email reports and messages. NOTE: Many ISPs block port 25. If this is the case for you, use your ISP's mail server, or configure email with a different port in TimeIPS and on your mail server and open the corresponding port on your firewall.
•  12.206.142.205 port 80 and 443 (and alternatively your assigned asp-port number) to for access to ASP systems.

Firewall/Router Ports (TCP incoming) that need to be forwarded:

If you have clocks or users outside your local network, these ports need to be "port-forwarded" in your router or firewall.

• 80 (Clock connectivity) Required for clock to master connectivity. Port forward required for WAN clocks.
• User specified port (Clock connectivity): Selected port can be set in System Administration->System Settings in the Network Configuration area in the Clock Access Port field.
• 80 (HTTP) If using port forwarding for remote access to administrative pages, forward incoming HTTP traffic to your TimeIPS server's LAN IP to port 80.
• 81 (TimeIPS Remote Clocking) Recommended for remote clocking from outside WAN.
  NOTE: If using port forwarding for remote clocking access, forward incoming remote clocking requests to your master station's LAN IP to port 81.