What are the Firewall and Network Port requirements for NexxisLive

NRG gateway

NexxisLive minimally needs an open outbound TCP port 443.

All control communication is encrypted over this one port using HTTPS.

Media streams can also be encrypted over this same port.

Following domains need to be whitelisted for operation

Opening UDP port 3478 is required for proper operation. If UDP port 3478 is blocked by the firewall, media may not be able to go through TURN servers (if they are needed for a particular session).

UDP is highly recommended over TCP for better quality audio and video. This port only accepts inbound traffic after an outbound request is sent. The connection is bidirectional but is always initiated from the corporate network/client so it is not possible for an external entity to send malicious traffic in the opposite direction. For the best possible experience, we recommend opening UDP ports 1025 - 65535. Using these ports, the session can establish a direct connection to send media data over UDP which results in lower latency and improved call quality.

NRG gateway also needs a time server to operate. If a local on premise time server is not available, firewall will need to allow connection to public time servers like time.google.com or pool.ntp.org over Port 123.

Remote Users

Following domains need to be whitelisted for operation