Firewall Configuration for Secure Networks
The Eagle Eye Cloud VMS and its bridge hardware is specifically designed to be highly secure and only uses utilizes TCP and UDP connections to transmit data to the cloud. If you restrict outbound connections on your local firewall, here is the IPv4 and port information you will need.
Outbound Ports for the Eagle Eye Bridge
The following TCP and UDP ports are used by the Eagle Eye Bridge. All connections are outbound-only, meaning that the bridge connects outbound and never accepts inbound connections (so you do NOT need to set up NAT rules as a general rule).
80/TCP # Used to discover video termination endpoints in the cloud
443/TCP # Used to transfer video to the cloud (TLS 1.2+)
773/TCP # Used to transfer video to the cloud (TLS 1.2+)
8081/TCP # Used to transfer video to the cloud
8082/UDP # Used to transfer video metadata to the cloud
50000-60000/TCP # Used occasionally to provide remote troubleshooting and maintenance
(Secured via SSL)
There can be no proxies or similar application-layer filtration devices between the Eagle Eye Bridge and the Internet, and multicast must be enabled so the bridge can detect cameras (if the bridge and cameras are on the same subnet, generally this isn’t a problem). UPNP is NOT required (the bridge won’t use it if enabled).
For further information on the ONVIF camera discovery protocol we use, see this article on WS-Discovery. Web Service Discovery is an OASIS industry standard and generally works without much effort on most internal networks. You should not need to adjust your firewall to get it to work unless there are additional firewalls between your bridge and cameras
Outbound IPs for the Eagle Eye Bridge
Should you need to restrict the Eagle Eye Bridge to a specific set of IP addresses, the following is the list of Eagle Eye IP addresses you should allow, in CIDR format:
Outbound Ports for the Eagle Eye Web and Mobile Applications
Independent of the bridge, the Eagle Eye Web and Mobile Applications for PCs, tablets, and phones also need to connect to the cloud to retrieve video, set settings, and so on. The ports required for this are:
tcp/80 # HTTP->SSL Redirect Only
tcp/443 # Web user interface
tcp/50000-60000 # Secure video transfer
The IPs are generally the same as for the bridge.
Outbound Ports for CameraDirect
Camera Direct uses the following TCP ports. All connections are outbound-only, meaning that connections are outbound and never accept inbound connections (so you do NOT need to set up e.g. NAT rules as a general rule).
TCP 80: Used to discover video termination endpoints in the cloud
TCP 443: Used to discover video termination endpoints in the cloud
TCP 8181: Used to transfer video to the cloud
Outbound IPs for CameraDirect
Should you need to restrict CameraDirect to a specific set of IP addresses, the following is the list of Eagle Eye IP addresses you should allow, in CIDR format:
Related Articles
Eagle Eye Camera Manager - Subnets
Outbound Ports for the Eagle Eye CameraManager The following TCP and UDP ports are used by the Eagle Eye CameraManager. All connections are outbound-only, meaning that connections are outbound and never accepts inbound connections (so you do NOT ...Hikvision Configuration Guide
This guide illustrates how to configure Hikvision cameras for integration with the Eagle Eye Security Camera System. It may be required to use Windows with Microsoft's Edge browser in Internet Explorer mode or to use Mac OS X with Safari to complete ...Sony Camera Configuration and Troubleshooting
This guide illustrates how to configure and troubleshoot Sony camera integration with the Eagle Eye Security Camera System. Configuration for Sony cameras Adjusting the Streams Image 1: Main Stream Please ensure that Image 1 matches the following ...Bridge Configurator Menu Guide
Bridge Configurator Menu Guide The Bridge Configurator Menu is available on CMVRs This guide describes what options exist in the Bridge Configurator Menu in order to connect to a bridge. For detailed instructions for troubleshooting offline bridges, ...Adjusting Network settings on an Eagle Eye Bridge/CMVR -- Setting a Static IP
Adjusting Network Settings on Eagle Eye Networks Bridge/CMVR Devices By default, all of our devices are set up for DHCP on the WAN and the CamLAN. In order to reconfigure these settings we recommend you connect a keyboard and monitor. The steps below ...