SiteWorx Gateway Connection - IT Information

SiteWorx Gateway Connection - IT Information

Firewall Ports

Gateways must be able to connect to reliable high-speed internet, with outbound firewall access to the following standard ports. Inbound access can remain blocked.
  1. 443 (HTTPS - TCP): Secure HTTP, used for SiteWorx core services
  2. 8444 (WAMP TCP): Web Application Messaging Protocol, used for SiteWorx core services
  3. 123 (NTP - UDP): Network Time Protocol, used for synchronizing time between sensors and SiteWorx (see more below)
  4. 6514 (syslog over TLS - TCP): Secure Syslog used for SiteWorx logging and diagnostics
  5. 53 (DNS - TCP): Domain Name Server, used for DNS lookup (see more below)

NTP

Gateways require NTP in order to authenticate with SiteWorx services. Gateways default to the following sequence of NTP servers:
  1. NTP server manually configured to gateway using Commissioner software (typically only used in static IP configurations)
  2. NTP server specified by DHCP server
  3. 0.digitallumens.pool.ntp.org, 1.digitallumens.pool.ntp.org, 2.digitallumens.pool.ntp.org and 3.digitallumens.pool.ntp.org via port 123
  4. Router (Gateway) IP Address as configured by DHCP or manually in Commissioner software

DNS

Gateways require DNS via port 53. Gateways default to the following sequence of DNS servers:
  1. DNS server manually configured to gateway using Commissioner software (typically only used in static IP configurations)
  2. DNS server specified by DHCP server
  3. 8.8.8.8 and 8.8.4.4

Firewall Whitelisting

SiteWorx supports both static IP and fully qualified domain name (FQDN) whitelisting. DNS and NTP whitelisting requirements will vary based upon the approach chosen by the customer. If whitelisting of static IPs or FQDNs is desired, the following should be whitelisted:

URL
Ports
Static IP Address
setup.siteworx.io
443, 8444
50.16.18.17
<organization>-backend.siteworx.io
443, 8444
The static IP for <organization>-backend.siteworx.io is assigned when the SiteWorx Custom URL is created. Email SiteWorxOps@siteworx.io for further information.
logs-01.loggly.com
6514
Solarwinds provides a list of static IP addresses for logs-01.loggly.com that can to be whitelisted

Info
<organization> is the subdomain of the SiteWorx Custom URL. For example, gateways associated with the URL https://example.siteworx.io will connect to example-backend.siteworx.io:443 and example-backend.siteworx.io:8444.
InfoThe fallback NTP pools of 0.digitallumens.pool.ntp.org, 1.digitallumens.pool.ntp.org, 2.digitallumens.pool.ntp.org and 3.digitallumens.pool.ntp.org do not resolve to static IP addresses, however NTP server(s) with static IP addresses can be specified. Refer to the NTP section for further information.

Proxies

SiteWorx is compatible with transparent proxies that do not alter certificates. An inspecting proxy or other man-in-the-middle that changes certificates will cause the gateways to be unable to authenticate with SiteWorx, and are thus not compatible.