Avaya Port Matrix Avaya Equinox Product Offerings

Transcription

1 Avaya Matrix Avaya Equinox Product Offerings Issue 1.0 Aug 15, 2018

2 2018, Avaya, Inc. All Rights Reserved Notice While reasonable efforts have been made to ensure that the information in this document is complete and accurate at the time of printing, Avaya assumes no liability for any errors. Avaya reserves the right to make changes and corrections to the information in this document without the obligation to notify any person or organization of such changes. Documentation disclaimer "Documentation" means information published in varying mediums which may include product information, operating instructions and performance specifications that are generally made available to users of products. Documentation does not include marketing materials. Avaya shall not be responsible for any modifications, additions, or deletions to the original published version of Documentation unless such modifications, additions, or deletions were performed by or on the express behalf of Avaya. End User agrees to indemnify and hold harmless Avaya, Avaya's agents, servants and employees against all claims, lawsuits, demands and judgments arising out of, or in connection with, subsequent modifications, additions or deletions to this documentation, to the extent made by End User. Link disclaimer Avaya is not responsible for the contents or reliability of any linked websites referenced within this site or Documentation provided by Avaya. Avaya is not responsible for the accuracy of any information, statement or content provided on these sites and does not necessarily endorse the products, services, or information described or offered within them. Avaya does not guarantee that these links will work all the time and has no control over the availability of the linked pages. Warranty Avaya provides a limited warranty on Avaya hardware and software. Refer to your sales agreement to establish the terms of the limited warranty. In addition, Avaya s standard warranty language, as well as information regarding support for this product while under warranty is available to Avaya customers and other parties through the Avaya Support website: under the link "Warranty & Product Lifecycle" or such successor site as designated by Avaya. Please note that if You acquired the product(s) from an authorized Avaya Channel Partner outside of the United States and Canada, the warranty is provided to You by said Avaya Channel Partner and not by Avaya. "Hosted Service" means an Avaya hosted service subscription that You acquire from either Avaya or an authorized Avaya Channel Partner (as applicable) and which is described further in Hosted SAS or other service description documentation regarding the applicable hosted service. If You purchase a Hosted Service subscription, the foregoing limited warranty may not apply but You may be entitled to support services in connection with the Hosted Service as described further in your service description documents for the applicable Hosted Service. Contact Avaya or Avaya Channel Partner (as applicable) for more information. Hosted Service Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 2 P a g e

3 THE FOLLOWING APPLIES ONLY IF YOU PURCHASE AN AVAYA HOSTED SERVICE SUBSCRIPTION FROM AVAYA OR AN AVAYA CHANNEL PARTNER (AS APPLICABLE), THE TERMS OF USE FOR HOSTED SERVICES ARE AVAILABLE ON THE AVAYA WEBSITE, UNDER THE LINK "Avaya Terms of Use for Hosted Services" OR SUCH SUCCESSOR SITE AS DESIGNATED BY AVAYA, AND ARE APPLICABLE TO ANYONE WHO ACCESSES OR USES THE HOSTED SERVICE. BY ACCESSING OR USING THE HOSTED SERVICE, OR AUTHORIZING OTHERS TO DO SO, YOU, ON BEHALF OF YOURSELF AND THE ENTITY FOR WHOM YOU ARE DOING SO (HEREINAFTER REFERRED TO INTERCHANGEABLY AS "YOU" AND "END USER"), AGREE TO THE TERMS OF USE. IF YOU ARE ACCEPTING THE TERMS OF USE ON BEHALF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY TO THESE TERMS OF USE. IF YOU DO NOT HAVE SUCH AUTHORITY, OR IF YOU DO NOT WISH TO ACCEPT THESE TERMS OF USE, YOU MUST NOT ACCESS OR USE THE HOSTED SERVICE OR AUTHORIZE ANYONE TO ACCESS OR USE THE HOSTED SERVICE. Licenses THE SOFTWARE LICENSE TERMS AVAILABLE ON THE AVAYA WEBSITE, UNDER THE LINK "AVAYA SOFTWARE LICENSE TERMS (Avaya Products)" OR SUCH SUCCESSOR SITE AS DESIGNATED BY AVAYA, ARE APPLICABLE TO ANYONE WHO DOWNLOADS, USES AND/OR INSTALLS AVAYA SOFTWARE, PURCHASED FROM AVAYA INC., ANY AVAYA AFFILIATE, OR AN AVAYA CHANNEL PARTNER (AS APPLICABLE) UNDER A COMMERCIAL AGREEMENT WITH AVAYA OR AN AVAYA CHANNEL PARTNER. UNLESS OTHERWISE AGREED TO BY AVAYA IN WRITING, AVAYA DOES NOT EXTEND THIS LICENSE IF THE SOFTWARE WAS OBTAINED FROM ANYONE OTHER THAN AVAYA, AN AVAYA AFFILIATE OR AN AVAYA CHANNEL PARTNER; AVAYA RESERVES THE RIGHT TO TAKE LEGAL ACTION AGAINST YOU AND ANYONE ELSE USING OR SELLING THE SOFTWARE WITHOUT A LICENSE. BY INSTALLING, DOWNLOADING OR USING THE SOFTWARE, OR AUTHORIZING OTHERS TO DO SO, YOU, ON BEHALF OF YOURSELF AND THE ENTITY FOR WHOM YOU ARE INSTALLING, DOWNLOADING OR USING THE SOFTWARE (HEREINAFTER REFERRED TO INTERCHANGEABLY AS "YOU" AND "END USER"), AGREE TO THESE TERMS AND CONDITIONS AND CREATE A BINDING CONTRACT BETWEEN YOU AND AVAYA INC. OR THE APPLICABLE AVAYA AFFILIATE ("AVAYA"). Avaya grants You a license within the scope of the license types described below, with the exception of Heritage Nortel Software, for which the scope of the license is detailed below. Where the order documentation does not expressly identify a license type, the applicable license will be a Designated License. The applicable number of licenses and units of capacity for which the license is granted will be one (1), unless a different number of licenses or units of capacity is specified in the documentation or other materials available to You. "Software" means computer programs in object code, provided by Avaya or an Avaya Channel Partner, whether as stand-alone products, pre-installed on hardware products, and any upgrades, updates, patches, bug fixes, or modified versions thereto. "Designated Processor" means a single stand-alone computing device. "Server" means a Designated Processor that hosts a software application to be accessed by multiple users. "Instance" means a single copy of the Software executing at a particular time: (i) on one physical machine; or (ii) on one deployed software virtual machine ("VM") or similar deployment. License type(s) Designated (s) License (DS). End User may install and use each copy or an Instance of the Software only on a number of Designated Processors up to the number indicated in the order. Avaya may require the Designated Processor(s) to be identified in the order by type, serial number, feature Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 3 P a g e

4 key, Instance, location or other specific designation, or to be provided by End User to Avaya through electronic means established by Avaya specifically for this purpose. Concurrent User License (CU). End User may install and use the Software on multiple Designated Processors or one or more Servers, so long as only the licensed number of Units are accessing and using the Software at any given time. A "Unit" means the unit on which Avaya, at its sole discretion, bases the pricing of its licenses and can be, without limitation, an agent, port or user, an or voice mail account in the name of a person or corporate function (e.g., webmaster or helpdesk), or a directory entry in the administrative database utilized by the Software that permits one user to interface with the Software. Units may be linked to a specific, identified Server or an Instance of the Software. Database License (DL). End User may install and use each copy or an Instance of the Software on one Server or on multiple Servers provided that each of the Servers on which the Software is installed communicates with no more than one Instance of the same database. CPU License (CP). End User may install and use each copy or Instance of the Software on a number of Servers up to the number indicated in the order provided that the performance capacity of the Server(s) does not exceed the performance capacity specified for the Software. End User may not re-install or operate the Software on Server(s) with a larger performance capacity without Avaya s prior consent and payment of an upgrade fee. Named User License (NU). You may: (i) install and use each copy or Instance of the Software on a single Designated Processor or Server per authorized Named User (defined below); or (ii) install and use each copy or Instance of the Software on a Server so long as only authorized Named Users access and use the Software. "Named User", means a user or device that has been expressly authorized by Avaya to access and use the Software. At Avaya s sole discretion, a "Named User" may be, without limitation, designated by name, corporate function (e.g., webmaster or helpdesk), an or voice mail account in the name of a person or corporate function, or a directory entry in the administrative database utilized by the Software that permits one user to interface with the Software. Shrinkwrap License (SR). You may install and use the Software in accordance with the terms and conditions of the applicable license agreements, such as "shrinkwrap" or "clickthrough" license accompanying or applicable to the Software ("Shrinkwrap License"). Heritage Nortel Software "Heritage Nortel Software" means the software that was acquired by Avaya as part of its purchase of the Nortel Enterprise Solutions Business in December The Heritage Nortel Software is the software contained within the list of Heritage Nortel Products located at under the link "Heritage Nortel Products" or such successor site as designated by Avaya. For Heritage Nortel Software, Avaya grants Customer a license to use Heritage Nortel Software provided hereunder solely to the extent of the authorized activation or authorized usage level, solely for the purpose specified in the Documentation, and solely as embedded in, for execution on, or for communication with Avaya equipment. Charges for Heritage Nortel Software may be based on extent of activation or use authorized as specified in an order or invoice. Copyright Except where expressly stated otherwise, no use should be made of materials on this site, the Documentation, Software, Hosted Service, or hardware provided by Avaya. All content on this site, the documentation, Hosted Service, and the product provided by Avaya including the selection, arrangement and design of the content is owned either by Avaya or its licensors and is protected by copyright and other intellectual property laws including the sui generis rights relating to the protection of databases. You may not modify, copy, reproduce, republish, upload, post, transmit or distribute in any way any content, in whole or in part, including any code and software unless expressly authorized by Avaya. Unauthorized reproduction, transmission, dissemination, storage, and or use without the express written consent of Avaya can be a criminal, as well as a civil offense under the applicable law. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 4 P a g e

5 Virtualization The following applies if the product is deployed on a virtual machine. Each product has its own ordering code and license types. Note that each Instance of a product must be separately licensed and ordered. For example, if the end user customer or Avaya Channel Partner would like to install two Instances of the same type of products, then two products of that type must be ordered. Third Party Components "Third Party Components" mean certain software programs or portions thereof included in the Software or Hosted Service may contain software (including open source software) distributed under third party agreements ("Third Party Components"), which contain terms regarding the rights to use certain portions of the Software ("Third Party Terms"). As required, information regarding distributed Linux OS source code (for those products that have distributed Linux OS source code) and identifying the copyright holders of the Third Party Components and the Third Party Terms that apply is available in the products, Documentation or on Avaya s website at: or such successor site as designated by Avaya. The open source software license terms provided as Third Party Terms are consistent with the license rights granted in these Software License Terms, and may contain additional rights benefiting You, such as modification and distribution of the open source software. The Third Party Terms shall take precedence over these Software License Terms, solely with respect to the applicable Third Party Components to the extent that these Software License Terms impose greater restrictions on You than the applicable Third Party Terms. The following applies only if the H.264 (AVC) codec is distributed with the product. THIS PRODUCT IS LICENSED UNDER THE AVC PATENT PORTFOLIO LICENSE FOR THE PERSONAL USE OF A CONSUMER OR OTHER USES IN WHICH IT DOES NOT RECEIVE REMUNERATION TO (i) ENCODE VIDEO IN COMPLIANCE WITH THE AVC STANDARD ("AVC VIDEO") AND/OR (ii) DECODE AVC VIDEO THAT WAS ENCODED BY A CONSUMER ENGAGED IN A PERSONAL ACTIVITY AND/OR WAS OBTAINED FROM A VIDEO PROVIDER LICENSED TO PROVIDE AVC VIDEO. NO LICENSE IS GRANTED OR SHALL BE IMPLIED FOR ANY OTHER USE. ADDITIONAL INFORMATION MAY BE OBTAINED FROM MPEG LA, L.L.C. SEE Service Provider THE FOLLOWING APPLIES TO AVAYA CHANNEL PARTNER S HOSTING OF AVAYA PRODUCTS OR SERVICES. THE PRODUCT OR HOSTED SERVICE MAY USE THIRD PARTY COMPONENTS SUBJECT TO THIRD PARTY TERMS AND REQUIRE A SERVICE PROVIDER TO BE INDEPENDENTLY LICENSED DIRECTLY FROM THE THIRD PARTY SUPPLIER. AN AVAYA CHANNEL PARTNER S HOSTING OF AVAYA PRODUCTS MUST BE AUTHORIZED IN WRITING BY AVAYA AND IF THOSE HOSTED PRODUCTS USE OR EMBED CERTAIN THIRD PARTY SOFTWARE, INCLUDING BUT NOT LIMITED TO MICROSOFT SOFTWARE OR CODECS, THE AVAYA CHANNEL PARTNER IS REQUIRED TO INDEPENDENTLY OBTAIN ANY APPLICABLE LICENSE AGREEMENTS, AT THE AVAYA CHANNEL PARTNER S EXPENSE, DIRECTLY FROM THE APPLICABLE THIRD PARTY SUPPLIER. WITH RESPECT TO CODECS, IF THE AVAYA CHANNEL PARTNER IS HOSTING ANY PRODUCTS THAT USE OR EMBED THE G.729 CODEC, H.264 CODEC, OR H.265 CODEC, THE AVAYA CHANNEL PARTNER ACKNOWLEDGES AND AGREES THE AVAYA CHANNEL PARTNER IS RESPONSIBLE FOR ANY AND ALL RELATED FEES AND/OR ROYALTIES. THE G.729 CODEC IS LICENSED BY SIPRO LAB TELECOM INC. SEE THE H.264 (AVC) CODEC IS LICENSED UNDER THE AVC PATENT PORTFOLIO LICENSE FOR THE Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 5 P a g e

6 PERSONAL USE OF A CONSUMER OR OTHER USES IN WHICH IT DOES NOT RECEIVE REMUNERATION TO: (I) ENCODE VIDEO IN COMPLIANCE WITH THE AVC STANDARD ("AVC VIDEO") AND/OR (II) DECODE AVC VIDEO THAT WAS ENCODED BY A CONSUMER ENGAGED IN A PERSONAL ACTIVITY AND/OR WAS OBTAINED FROM A VIDEO PROVIDER LICENSED TO PROVIDE AVC VIDEO. NO LICENSE IS GRANTED OR SHALL BE IMPLIED FOR ANY OTHER USE. ADDITIONAL INFORMATION FOR H.264 (AVC) AND H.265 (HEVC) CODECS MAY BE OBTAINED FROM MPEG LA, L.L.C. SEE Compliance with Laws You acknowledge and agree that it is Your responsibility for complying with any applicable laws and regulations, including, but not limited to laws and regulations related to call recording, data privacy, intellectual property, trade secret, fraud, and music performance rights, in the country or territory where the Avaya product is used. Preventing Toll Fraud Toll Fraud is the unauthorized use of your telecommunications system by an unauthorized party (for example, a person who is not a corporate employee, agent, subcontractor, or is not working on your company's behalf). Be aware that there can be a risk of Toll Fraud associated with your system and that, if Toll Fraud occurs, it can result in substantial additional charges for your telecommunications services. Avaya Toll Fraud intervention If You suspect that You are being victimized by Toll Fraud and You need technical assistance or support, call Technical Service Center Toll Fraud Intervention Hotline at for the United States and Canada. For additional support telephone numbers, see the Avaya Support website: or such successor site as designated by Avaya. Security Vulnerabilities Information about Avaya s security support policies can be found in the Security Policies and Support section of Suspected Avaya product security vulnerabilities are handled per the Avaya Product Security Support Flow ( Downloading Documentation For the most current versions of Documentation, see the Avaya Support website: or such successor site as designated by Avaya. Contact Avaya Support See the Avaya Support website: for product or Hosted Service notices and articles, or to report a problem with your Avaya product or Hosted Service. For a list of support telephone numbers and contact addresses, go to the Avaya Support website: (or such successor site as designated by Avaya), scroll to the bottom of the page, and select Contact Avaya Support. Trademarks Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 6 P a g e

7 The trademarks, logos and service marks ("Marks") displayed in this site, the Documentation, Hosted Service(s), and product(s) provided by Avaya are the registered or unregistered Marks of Avaya, its affiliates, its licensors, its suppliers, or other third parties. Users are not permitted to use such Marks without prior written consent from Avaya or such third party which may own the Mark. Nothing contained in this site, the Documentation, Hosted Service(s) and product(s) should be construed as granting, by implication, estoppel, or otherwise, any license or right in and to the Marks without the express written permission of Avaya or the applicable third party. Avaya is a registered trademark of Avaya Inc. All non-avaya trademarks are the property of their respective owners. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 7 P a g e

8 Contents 1. Introduction Avaya Equinox Product Offering Overview Avaya Equinox Clients Avaya Aura Elements Other Network Elements Avaya Equinox Product Offering Overview Avaya Equinox Client Models Avaya Aura Elements Other Network Elements Avaya Equinox Product Offering Overview Avaya Equinox Client Models Avaya Aura Elements Other Network Elements Summary for Avaya Equinox Product Offerings Avaya Equinox Client Models for Offering Table Usage Diagram Avaya Equinox Client Models for Offering Table Usage Diagram Avaya Equinox Client Models for Offering Table Usage Diagram Avaya Equinox Vantage Client Table Usage Diagram Avaya Aura Services (AADS) Table Usage Diagram Avaya Multimedia Messaging (AMM) Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 8 P a g e

9 Table Usage Diagram Avaya Aura Web Gateway (AAWG) Table Usage Diagram Avaya Session Border Controller for Enterprise (ASBCE) Table Usage Diagram Avaya Aura Media Server (AAMS) Table Usage Diagram Avaya Conferencing Table Avaya Aura Session (SM) Table Usage Diagram Avaya Aura (SMGR) Table Usage Diagram Avaya Aura Communication (CM) Table Usage Diagram Avaya Aura Presence Services (PS) Table Usage Diagram Avaya Secure Access Link Gateway (SAL) Table Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 9 P a g e

10 1. Introduction This document provides port usage information for Avaya Equinox product offerings. An overview of the Avaya Equinox Clients and Avaya Aura Elements for each offering is provided, followed by a summary that highlights the differences in Avaya Aura Elements involved in the offerings. usage information for each Avaya Equinox Client bundle for the offering are provided. In addition, port usage information for each Avaya Aura element are also included for easy reference. Please note that, for ease of navigating within this document, the two summary tables for Avaya Equinox client models and Avaya Aura Elements have cross reference links to the respective Usage sections embedded. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 10 P a g e

11 2. Avaya Equinox Product Offering 1 Overview The Avaya Equinox Product Offering 1 Package includes the Avaya Equinox UC Clients for the desktop and mobile platforms and various Avaya product elements to provide full Unified Communications functionality. Conferencing elements are not included in this offering. The key communication features include: Audio and Video calls Messaging Contacts and Presence Call logs Avaya Equinox Clients Avaya Equinox Clients for this offering include: Avaya Equinox Desktop SIP Clients for Windows and Mac platforms Avaya Equinox Mobile SIP Clients for and ios platforms Avaya Equinox Web Client Avaya Equinox Vantage SIP Client on platform Avaya Aura Elements Avaya Aura Elements for this offering include: Avaya Aura Services (AADS) Avaya Multimedia Messaging (AMM) Avaya Aura Web Gateway (AAWG) Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 11 P a g e

12 Avaya Session Border Controller for Enterprise (ASBCE) Avaya Aura Media Server (AAMS) Avaya Aura Session (SM) Avaya Aura (SMGR) Avaya Aura Communication (CM) Avaya Aura Presence Services on Breeze (PS) Avaya Secure Access Link Gateway (SAL) Other Network Elements Other Network Elements considered in this offering in terms of Usage include: Domain Name Server (DNS) Lightweight Directory Access Protocol Server (LDAP) Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 12 P a g e

13 3. Avaya Equinox Product Offering 2 Overview The Avaya Equinox Product Offering 2 Package includes the Avaya Equinox UC Clients for the desktop and mobile platforms and various Avaya product elements for full Avaya Equinox Team Enablement and Conferencing functionality. Features include: Audio and Video calls Messaging Contacts and Presence Call logs Conference management and moderator controls Conference roster Web Collaboration Avaya Equinox Client Models Avaya Equinox Client Models for this offering include: Avaya Equinox Desktop SIP Clients for Windows and Mac platforms Avaya Equinox Mobile SIP Clients for and ios platforms Avaya Equinox Web Client Avaya Equinox Vantage SIP Client on platform Avaya Equinox Conferencing al Clients for various browsers Avaya Aura Elements Avaya Aura Elements for this offering include: Avaya Aura Services (AADS) Avaya Multimedia Messaging (AMM) Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 13 P a g e

14 Avaya Aura Web Gateway (AAWG) Avaya Session Border Controller for Enterprise (ASBCE) Avaya Aura Media Server (AAMS) Avaya Conferencing 9.1 Avaya Aura Session (SM) Avaya Aura (SMGR) Avaya Aura Communication (CM) Avaya Aura Presence Services on Breeze (PS) Avaya Secure Access Link Gateway (SAL) Other Network Elements Other Network Elements considered in this offering in terms of Usage include: Domain Name Server (DNS) Lightweight Directory Access Protocol Server (LDAP) Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 14 P a g e

15 4. Avaya Equinox Product Offering 3 Overview The Avaya Equinox Product Offering 3 Package is geared for Equinox Conferencing only. This includes the Avaya Equinox Over The Top (OTT) Clients for the desktop and mobile platforms, the Avaya Equinox Conferencing al Clients. Together with various Avaya product elements, full Conference functionalities are provided. Key conferencing features include: Conference management and moderator controls Conference roster Web Collaboration Avaya Equinox Client Models Avaya Equinox Client Models for this offering include: Avaya Equinox Desktop OTT Clients for Windows and Mac platforms Avaya Equinox Mobile OTT Clients for and ios platforms Avaya Equinox Conferencing al Clients for various browsers Avaya Aura Elements Avaya Aura Elements for this offering include: Avaya Aura Web Gateway (AAWG) Avaya Session Border Controller for Enterprise (ASBCE) Avaya Conferencing 9.1 Avaya Secure Access Link Gateway (SAL) Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 15 P a g e

16 Other Network Elements Other Network Elements considered in this offering in terms of Usage include: Domain Name Server (DNS) Lightweight Directory Access Protocol Server (LDAP) Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 16 P a g e

17 5. Summary for Avaya Equinox Product Offerings Table 1 : Avaya Equinox Client Models for different offerings Avaya Equinox Client Models Offering 1 Offering 2 Offering 3 Avaya Equinox Desktop SIP Clients for Windows and Mac platforms Avaya Equinox Mobile SIP Clients for and ios platforms yes yes yes yes Avaya Equinox Web Client yes yes Avaya Equinox Vantage SIP Client on platform yes yes Avaya Equinox Desktop OTT Clients for Windows and Mac platforms yes Avaya Equinox Mobile OTT Clients for and ios platforms yes Avaya Equinox Conferencing al Clients for various browsers Usage Reference Section Avaya Avaya Equinox Client Models for Offering 1 yes Avaya Equinox Client Models for Offering 2 yes Avaya Avaya Equinox Client Models for Offering 3 Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 17 P a g e

18 Table 2: Avaya Aura Elements for different offerings Avaya Aura Elements Offering 1 Offering 2 Offering 3 Avaya Aura Services (AADS) Avaya Multimedia Messaging (AMM) Avaya Aura Web Gateway (AAWG) Avaya Session Border Controller for Enterprise (ASBCE) Avaya Aura Media Server (AAMS) Avaya Conferencing 9.1 Avaya Aura Session (SM) Avaya Aura (SMGR) Avaya Aura Communication (CM) Avaya Aura Presence Services (PS) Avaya Secure Access Link Gateway (SAL) yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes NOTE: To find out the Usage for an Avaya Aura Element, please follow the link embedded for each element in the table. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 18 P a g e

19 6. Avaya Equinox Client Models for Offering 1 Reference link : Avaya Equinox 3.x Matrix This section shows the port usage of all the Avaya Equinox Clients in Offering 1 except for the Avaya Equinox Vantage Client. For port usage of the Avaya Equinox Vantage Client, please refer to the section titled Avaya Equinox Vantage Client. Table Table 3: Table for Avaya Equinox Client Models for Offering 1 (Greyed out cells indicate ports that are not used for this offering. Those ports are used for conferencing.) Source Transport / Application Protocol Optionally Enabled / Disabled? Default State HTTP servers used to support Autoconfiguration, Personal Profile 80 TCP/HTTP No Closed File downloads for service discovery, PPM HTTP servers used to support Autoconfiguration, Personal Profile, Avaya Aura Services 443 TLS/HTTPS No Closed File downloads for service discovery, PPM, AADS Avaya Equinox ios, Client Enablement Services 7777 (1024- TLS/ (Proprietary) Yes Closed Messaging between Avaya Equinox and the Client Enablement Services is the default port on the CES server, however confirm with the CES system administrator that this is the port in use for your deployment Avaya Session (SM) 5060 (1024- TCP/SIP Yes Closed SIP signaling traffic Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 19 P a g e

20 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State Avaya Session (SM) 5061 (1024- TLS/SIPS Yes Closed SIP signaling traffic Avaya Session Border Controller 3478 TCP/STUN TCP/TURN No Closed STUN/TURN Nat Traversal Avaya Session Border Controller 5349 TLS/STUN TLS/TURN No Closed STUN/TURN Nat Traversal Default range is ( ) Available range is Media Gateway, Conferencing Server, Application Server, Desk Phone, Soft Client, Avaya Session Border Controller UDP/RTP, UDP/RTCP, UDP/SRTP, UDP/SRTCP No Closed Media traffic (audio/video) for SIP calls. The destination port range listed in this document (1024- highlights that the actual destination port for media traffic for any call is dependent on the destination of the call and negotiated in real-time during call setup. It is not possible to provide the specific list of ports that will be negotiated for all possible call destinations in this document macos macos LDAP Server 389 TCP No Closed Enterprise Directory Contact Lookup LDAP Server 636 TLS No Closed Enterprise Directory Contact Lookup Media Gateway, Conferencing Server, Application Server, Desk Phone, Soft Client Avaya Equinox UDP/RTP, UDP/RTCP, UDP/SRTP, UDP/SRTCP No Closed Media traffic (audio/video) for SIP calls. The destination port range listed in this document (1024- highlights that the actual destination port for media traffic for any call is dependent on the destination of the call and negotiated in real-time during call setup. It is not possible to provide the specific list of ports that will be negotiated for all possible call destinations in this document Equinox, Avaya Multimedia Messaging server 443 (1024- TLS/HTTPS Yes Closed Messaging traffic. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 20 P a g e

21 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State Equinox, Equinox, DNS Servers 53 UDP/DNS No Closed Domain lookups, service discovery analytics.google.com 443 TCP/HTTPS Yes Closed Google Analytics Avaya Aura Services 443 TLS/HTTPS No Closed services e.g. Add, Remove, Search AADS Contacts Avaya Aura Web Collaboration 80 TCP/HTTP No Closed Web collaboration Avaya Aura Web Collaboration 443 TLS/HTTPS Web Sockets No Closed Web collaboration Equinox Conferencing Unified Conference Control 443 TLS/HTTPS No Closed Unified Conference Control Server (equinox conferencing) macos BFCP Peer UDP/BFCP Yes Closed Binary Floor Control Protocol for sharing video Microsoft Exchange 443 TCP/HTTPS No Closed Calendar meetings through Microsoft s Exchange Web Services (EWS) Web Server to support configuration file. 80 TCP/HTTP No Closed File downloads for Configuration Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 21 P a g e

22 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State Web Server to support configuration file. 443 TLS/HTTPS No Closed File downloads for Configuration Web Server to support SCEP 443 TLS/HTTPS No Closed Simple Certificate Enrollment Protocol for certificate distribution. Web Server to support SCEP 80 TCP/HTTP No Closed Simple Certificate Enrollment Protocol for certificate distribution. Avaya Session Border Controller. 443 HTTPS No Closed Media tunneled over HTTPS. Communication Services Package Avaya Aura Web Gateway 443 TLS/HTTPS Web Sockets Server-Sent Events No Closed HTTP to SIP Gateway supporting WebRTC Accounts.zang.io 443 TLS/HTTPS Yes Closed Avaya Cloud/Zang account login Spaces.zang.io 443 TLS/HTTPS Yes Closed Zang Spaces Direct messaging IP office SIP server 5060 TCP/SIP Yes Closed SIP signaling traffic IP office SIP server 5061 TLS/SIPS Yes Closed SIP signaling traffic Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 22 P a g e

23 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State HTTP Proxy HTTP No Closed Proxy Configuration usage determined by configuration. Proxy configuration retrieved from Operating. HTTP Proxy HTTPS No Closed Proxy Configuration usage determined by configuration. Proxy configuration retrieved from Operating. An ephemeral port is a short-lived endpoint that is created by the operating system when a program requests any available user port. The operating system selects the port number from a predefined range, typically between 1024 and 65535, and releases the port after the related TCP connection terminates. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 23 P a g e

24 Usage Diagram 1. Applies to macos and Windows platform only 2. Applies to ios and only Session (SM) / Session Border Controller (SBC)/IP Office Media Gateway, Conferencing Server, Application Server, Desk Phone, Soft Client Client Enablement Services 2 Avaya Aura s Services (AADS) WebRTC Media Gateway (AMS) Avaya Aura Web Gateway Avaya Multimedia Messaging (AMM) Microsoft Exchange Web Services Account.zang.io spaces.zang.io SIP Default: 5060/5061 STUN/TURN Default: 3478 RTP/SRTP (1024- TLS/ Proprietary Default: 7777 HTTPS Default: 443 RTP/SRTP (1024- STUN / TURN / ICE Default: 3478 / 5349 HTTPS Default: 443 HTTPS Default: 443 HTTPS Default: 443 HTTPS Default: 443 Avaya Equinox Clients Network Interface DNS Default: 53 LDAP Default: 389/636 HTTPS Default: 443 BFCP/UDP Default: 5070 HTTP/HTTPS Default: 80/443 HTTP/HTTPS Default: 80/443 HTTPS Default: 443 HTTPS Default: 443 HTTP/HTTPS Default: 80/443 HTTP/HTTPS Default: 80/443 DNS Servers LDAP Servers 1 Personal Profile BFCP Peer 1 SCEP Server Web Collaboration Equinox Conferencing (UCCP) Google Analytics Servers Web Server (Config) HTTP Proxy Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 24 P a g e

25 7. Avaya Equinox Client Models for Offering 2 Reference link : Avaya Equinox 3.x Matrix This section shows the port usage of all the Avaya Equinox Clients in Offering 2 except for the Avaya Equinox Vintage Client. For port usage of the Avaya Equinox Vantage Client, please refer to the section titled Avaya Equinox Vantage Client. Table Table 4: Table for Avaya Equinox Client Models for Offering 2 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State HTTP servers used to support Autoconfiguration, Personal Profile 80 TCP/HTTP No Closed File downloads for service discovery, PPM HTTP servers used to support Autoconfiguration, Personal Profile, Avaya Aura Services 443 TLS/HTTPS No Closed File downloads for service discovery, PPM, AADS Avaya Equinox ios, Client Enablement Services 7777 (1024- TLS/ (Proprietary) Yes Closed Messaging between Avaya Equinox and the Client Enablement Services is the default port on the CES server, however confirm with the CES system administrator that this is the port in use for your deployment Avaya Session (SM) 5060 (1024- TCP/SIP Yes Closed SIP signaling traffic Avaya Session (SM) 5061 (1024- TLS/SIPS Yes Closed SIP signaling traffic Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 25 P a g e

26 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State Avaya Session Border Controller 3478 TCP/STUN TCP/TURN No Closed STUN/TURN Nat Traversal Avaya Session Border Controller 5349 TLS/STUN TLS/TURN No Closed STUN/TURN Nat Traversal Default range is ( ) Available range is Media Gateway, Conferencing Server, Application Server, Desk Phone, Soft Client, Avaya Session Border Controller UDP/RTP, UDP/RTCP, UDP/SRTP, UDP/SRTCP No Closed Media traffic (audio/video) for SIP calls. The destination port range listed in this document (1024- highlights that the actual destination port for media traffic for any call is dependent on the destination of the call and negotiated in real-time during call setup. It is not possible to provide the specific list of ports that will be negotiated for all possible call destinations in this document macos macos LDAP Server 389 TCP No Closed Enterprise Directory Contact Lookup LDAP Server 636 TLS No Closed Enterprise Directory Contact Lookup Media Gateway, Conferencing Server, Application Server, Desk Phone, Soft Client Avaya Equinox UDP/RTP, UDP/RTCP, UDP/SRTP, UDP/SRTCP No Closed Media traffic (audio/video) for SIP calls. The destination port range listed in this document (1024- highlights that the actual destination port for media traffic for any call is dependent on the destination of the call and negotiated in real-time during call setup. It is not possible to provide the specific list of ports that will be negotiated for all possible call destinations in this document Equinox, Avaya Multimedia Messaging server 443 (1024- TLS/HTTPS Yes Closed Messaging traffic. Equinox, DNS Servers 53 UDP/DNS No Closed Domain lookups, service discovery Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 26 P a g e

27 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State Equinox, analytics.google.com 443 TCP/HTTPS Yes Closed Google Analytics Avaya Aura Services 443 TLS/HTTPS No Closed services e.g. Add, Remove, Search AADS Contacts Avaya Aura Web Collaboration 80 TCP/HTTP No Closed Web collaboration Avaya Aura Web Collaboration 443 TLS/HTTPS Web Sockets No Closed Web collaboration Equinox Conferencing Unified Conference Control 443 TLS/HTTPS No Closed Unified Conference Control Server (equinox conferencing) macos BFCP Peer UDP/BFCP Yes Closed Binary Floor Control Protocol for sharing video Microsoft Exchange 443 TCP/HTTPS No Closed Calendar meetings through Microsoft s Exchange Web Services (EWS) Web Server to support configuration file. 80 TCP/HTTP No Closed File downloads for Configuration Web Server to support configuration file. 443 TLS/HTTPS No Closed File downloads for Configuration Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 27 P a g e

28 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State Web Server to support SCEP 443 TLS/HTTPS No Closed Simple Certificate Enrollment Protocol for certificate distribution. Web Server to support SCEP 80 TCP/HTTP No Closed Simple Certificate Enrollment Protocol for certificate distribution. Avaya Session Border Controller. 443 HTTPS No Closed Media tunneled over HTTPS. Communication Services Package Avaya Aura Web Gateway 443 TLS/HTTPS Web Sockets Server-Sent Events No Closed HTTP to SIP Gateway supporting WebRTC Accounts.zang.io 443 TLS/HTTPS Yes Closed Avaya Cloud/Zang account login Spaces.zang.io 443 TLS/HTTPS Yes Closed Zang Spaces Direct messaging IP office SIP server 5060 TCP/SIP Yes Closed SIP signaling traffic IP office SIP server 5061 TLS/SIPS Yes Closed SIP signaling traffic HTTP Proxy HTTP No Closed Proxy Configuration usage determined by configuration. Proxy configuration retrieved from Operating. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 28 P a g e

29 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State HTTP Proxy HTTPS No Closed Proxy Configuration usage determined by configuration. Proxy configuration retrieved from Operating. An ephemeral port is a short-lived endpoint that is created by the operating system when a program requests any available user port. The operating system selects the port number from a predefined range, typically between 1024 and 65535, and releases the port after the related TCP connection terminates. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 29 P a g e

30 Usage Diagram Session (SM) / Session Border Controller (SBC)/IP Office Media Gateway, Conferencing Server, Application Server, Desk Phone, Soft Client Client Enablement Services 2 Avaya Aura s Services (AADS) WebRTC Media Gateway (AMS) Avaya Aura Web Gateway Avaya Multimedia Messaging (AMM) Microsoft Exchange Web Services Account.zang.io spaces.zang.io SIP Default: 5060/5061 STUN/TURN Default: 3478 RTP/SRTP (1024- TLS/ Proprietary Default: 7777 HTTPS Default: 443 RTP/SRTP (1024- STUN / TURN / ICE Default: 3478 / 5349 HTTPS Default: 443 HTTPS Default: 443 HTTPS Default: 443 HTTPS Default: 443 Avaya Equinox Clients Network Interface 1. Applies to macos and Windows platform only 2. Applies to ios and only DNS Default: 53 LDAP Default: 389/636 HTTPS Default: 443 BFCP/UDP Default: 5070 HTTP/HTTPS Default: 80/443 HTTP/HTTPS Default: 80/443 HTTPS Default: 443 HTTPS Default: 443 HTTP/HTTPS Default: 80/443 HTTP/HTTPS Default: 80/443 DNS Servers LDAP Servers 1 Personal Profile BFCP Peer 1 SCEP Server Web Collaboration Equinox Conferencing (UCCP) Google Analytics Servers Web Server (Config) HTTP Proxy Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 30 P a g e

31 8. Avaya Equinox Client Models for Offering 3 Reference link : Avaya Equinox 3.x Matrix This section shows the port usage of all the Avaya Equinox Clients in Offering 3 except for the Avaya Equinox Vintage Client. For port usage of the Avaya Equinox Vantage Client, please refer to the section titled Avaya Equinox Vantage Client. Table Table 5: Table for Avaya Equinox Client Models for Offering 3 (Greyed out cells indicate ports that are not used for this offering. Those ports are used for UC functionalities, ie, SIP signaling, Messaging and Contact management.) Source Transport / Application Protocol Optionally Enabled / Disabled? Default State HTTP servers used to support Autoconfiguration, Personal Profile 80 TCP/HTTP No Closed File downloads for service discovery, PPM HTTP servers used to support Autoconfiguration, Personal Profile, Avaya Aura Services 443 TLS/HTTPS No Closed File downloads for service discovery, PPM, AADS Avaya Equinox ios, Client Enablement Services 7777 (1024- TLS/ (Proprietary) Yes Closed Messaging between Avaya Equinox and the Client Enablement Services is the default port on the CES server, however confirm with the CES system administrator that this is the port in use for your deployment Avaya Session (SM) 5060 (1024- TCP/SIP Yes Closed SIP signaling traffic Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 31 P a g e

32 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State Avaya Session (SM) 5061 (1024- TLS/SIPS Yes Closed SIP signaling traffic Avaya Session Border Controller 3478 TCP/STUN TCP/TURN No Closed STUN/TURN Nat Traversal Avaya Session Border Controller 5349 TLS/STUN TLS/TURN No Closed STUN/TURN Nat Traversal Default range is ( ) Available range is Media Gateway, Conferencing Server, Application Server, Desk Phone, Soft Client, Avaya Session Border Controller UDP/RTP, UDP/RTCP, UDP/SRTP, UDP/SRTCP No Closed Media traffic (audio/video) for SIP calls. The destination port range listed in this document (1024- highlights that the actual destination port for media traffic for any call is dependent on the destination of the call and negotiated in real-time during call setup. It is not possible to provide the specific list of ports that will be negotiated for all possible call destinations in this document macos macos LDAP Server 389 TCP No Closed Enterprise Directory Contact Lookup (7) LDAP Server 636 TLS No Closed Enterprise Directory Contact Lookup (7) Media Gateway, Conferencing Server, Application Server, Desk Phone, Soft Client Avaya Equinox UDP/RTP, UDP/RTCP, UDP/SRTP, UDP/SRTCP No Closed Media traffic (audio/video) for SIP calls. The destination port range listed in this document (1024- highlights that the actual destination port for media traffic for any call is dependent on the destination of the call and negotiated in real-time during call setup. It is not possible to provide the specific list of ports that will be negotiated for all possible call destinations in this document Equinox, Avaya Multimedia Messaging server 443 (1024- TLS/HTTPS Yes Closed Messaging traffic. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 32 P a g e

33 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State Equinox, Equinox, DNS Servers 53 UDP/DNS No Closed Domain lookups, service discovery analytics.google.com 443 TCP/HTTPS Yes Closed Google Analytics Avaya Aura Services 443 TLS/HTTPS No Closed services e.g. Add, Remove, Search AADS Contacts Avaya Aura Web Collaboration 80 TCP/HTTP No Closed Web collaboration Avaya Aura Web Collaboration 443 TLS/HTTPS Web Sockets No Closed Web collaboration Equinox Conferencing Unified Conference Control 443 TLS/HTTPS No Closed Unified Conference Control Server (equinox conferencing) macos BFCP Peer UDP/BFCP Yes Closed Binary Floor Control Protocol for sharing video Microsoft Exchange 443 TCP/HTTPS No Closed Calendar meetings through Microsoft s Exchange Web Services (EWS) Web Server to support configuration file. 80 TCP/HTTP No Closed File downloads for Configuration Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 33 P a g e

34 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State Web Server to support configuration file. 443 TLS/HTTPS No Closed File downloads for Configuration Web Server to support SCEP 443 TLS/HTTPS No Closed Simple Certificate Enrollment Protocol for certificate distribution. Web Server to support SCEP 80 TCP/HTTP No Closed Simple Certificate Enrollment Protocol for certificate distribution. Avaya Session Border Controller. 443 HTTPS No Closed Media tunneled over HTTPS. Communication Services Package Avaya Aura Web Gateway 443 TLS/HTTPS Web Sockets Server-Sent Events No Closed HTTP to SIP Gateway supporting WebRTC Accounts.zang.io 443 TLS/HTTPS Yes Closed Avaya Cloud/Zang account login Spaces.zang.io 443 TLS/HTTPS Yes Closed Zang Spaces Direct messaging IP office SIP server 5060 TCP/SIP Yes Closed SIP signaling traffic IP office SIP server 5061 TLS/SIPS Yes Closed SIP signaling traffic Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 34 P a g e

35 Source Transport / Application Protocol Optionally Enabled / Disabled? Default State HTTP Proxy HTTP No Closed Proxy Configuration usage determined by configuration. Proxy configuration retrieved from Operating. HTTP Proxy HTTPS No Closed Proxy Configuration usage determined by configuration. Proxy configuration retrieved from Operating. An ephemeral port is a short-lived endpoint that is created by the operating system when a program requests any available user port. The operating system selects the port number from a predefined range, typically between 1024 and 65535, and releases the port after the related TCP connection terminates. Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 35 P a g e

36 Usage Diagram Session (SM) / Session Border Controller (SBC)/IP Office Media Gateway, Conferencing Server, Application Server, Desk Phone, Soft Client Client Enablement Services 2 Avaya Aura s Services (AADS) WebRTC Media Gateway (AMS) Avaya Aura Web Gateway Avaya Multimedia Messaging (AMM) Microsoft Exchange Web Services Account.zang.io spaces.zang.io SIP Default: 5060/5061 STUN/TURN Default: 3478 RTP/SRTP (1024- TLS/ Proprietary Default: 7777 HTTPS Default: 443 RTP/SRTP (1024- STUN / TURN / ICE Default: 3478 / 5349 HTTPS Default: 443 HTTPS Default: 443 HTTPS Default: 443 HTTPS Default: 443 Avaya Equinox Clients Network Interface 1. Applies to macos and Windows platform only 2. Applies to ios and only DNS Default: 53 LDAP Default: 389/636 HTTPS Default: 443 BFCP/UDP Default: 5070 HTTP/HTTPS Default: 80/443 HTTP/HTTPS Default: 80/443 HTTPS Default: 443 HTTPS Default: 443 HTTP/HTTPS Default: 80/443 HTTP/HTTPS Default: 80/443 DNS Servers LDAP Servers 1 Personal Profile BFCP Peer 1 SCEP Server Web Collaboration Equinox Conferencing (UCCP) Google Analytics Servers Web Server (Config) HTTP Proxy Issue 1.0 Avaya Matrix: Avaya Equinox Product Offerings 36 P a g e

37 9. Avaya Equinox Vantage Client Reference link : Avaya Vantage Basic Application SIP R1.x.x.x Table Table 6: s for Avaya Vantage (Eth or WiFi) Source Network / Application Protocol Optionally Enabled / Disabled? Default State Use of DNS resolver by Avaya Vantage Basic Application DNS Server 53 UDP / DNS Yes N/A Resolving DNS names port selected by O/S Configuration parameter DNSSRVR. Controlled also from the settings application. Avaya Vantage Basic Application PPM client PPM Server 443 (HTTPS) TCP / HTTPS Yes N/A When SIP_CONTROLLER_LIST is then no PPM messages are sent. port selected by O/S PPM is supported in Avaya Aura environment only. Avaya Vantage Basic Application HTTP/S client HTTP/S file server 80 (HTTP) 443 HTTPS) (1- TCP / HTTP TCP / HTTPS Yes N/A Downloading branding file from HTTP/S file server (such as Avaya Utility Server, Microsoft IIS server, Apache Server, etc). port selected by O/S BRANDING_FILE configuration parameter controls the destination IP address, port, protocol and path. Avaya Vantage Basic Application HTTP/S client Avaya Aura Services (AADS) 443 (HTTPS) (1- TCP / HTTP TCP / HTTPS Yes N/A AADS contacts services port selected by O/S ACSENABLED, ACSSRVR, ACSPORT and ACSSECURE are used to enable/disable AADS contacts services and define the AADS server. Avaya Vantage Basic Application Media Another Video phone, IP phone or media board 5004 for RTP, 5005 for RTCP, or as specified by SIP signaling UDP / RTP, UDP / RTCP, UDP / SRTP, UDP / SRTCP No N/A Transport of audio/video (RTP/SRTP) and associated metrics (RTCP/SRTCP). The source port starting point is defined by the configuration parameter RTP_PORT_LOW (default, 5004) and the range is defined by the configuration parameter RTP_PORT_RANGE (default 200). Avaya Matrix: Avaya Equinox Product Offerings 37 P a g e

38 Source Network / Application Protocol Optionally Enabled / Disabled? Default State Another Video phone, IP phone or media board 5004 for RTP, 5005 for RTCP, or as specified by SIP signaling Avaya Vantage Basic Application Media UDP / RTP, UDP / RTCP, UDP / SRTP, UDP / RTCP No Closed Transport of audio/video (RTP/SRTP) and associated metrics (RTCP/SRTCP). port can be configurable as described above for source port. Source port is determined by the other IP phone or media board Avaya Vantage Basic Application Media SIP Proxy Server (Avaya Session, Avaya SBC or Avaya IP Office) 5061 (TLS) TCP / TLS / SIP No N/A SIP Signaling. The destination port, protocol and IP address can be configured using SIP_CONTROLLER_LIST configuration parameter (also configured in the settings application by administrator) Sip Signaling with IP Office can be supported with both SIP/TLS and SIP/TCP. SIP/UDP is not supported. Avaya Matrix: Avaya Equinox Product Offerings 38 P a g e

39 Usage Diagram Avaya Matrix: Avaya Equinox Product Offerings 39 P a g e

40 10. Avaya Aura Services (AADS) Reference link : Services 7.1.x Source Table Table 7: s for AADS Management Interface (eth0) Network / Application Protocol Optionally Enabled / Disabled? Default State Admin terminal or SAL Gateway Avaya Aura Services 22 TCP/SSH Yes Open This interface provides Linux shell access for system installation/administration) Admin terminal or NMS Avaya Aura Services 161 UDP/SNMP No Closed This interface allows a remote SNMP agent to retrieve MIB information Avaya Avaya Aura Services 2009 TCP/JMX No Open This interface is used to interoperate with the Avaya Data Replication Service (DRS) Admin terminal (browser) Avaya Aura Services Avaya Aura Services Avaya Aura Services Avaya Aura Services Avaya Aura Services Avaya Aura Services DNS server 53 Kerberos Server (Domain Controller) NTP time server Avaya SAL Gateway and/or NMS Avaya Aura 8445 TCP/HTTPS No Open 88 UDP and TCP/DNS UDP/ Kerberos No Yes Open Open 123 UDP/NTP No Open 162 UDP/SNMP No Open 443 TCP/HTTPS No Open Avaya Aura Services Administrative Graphical User Interface. This web-based interface can be used to manage the Avaya Aura Services application This interface is used by the Avaya Aura Services application to perform DNS resolution This interface is used by the Avaya Aura Services application to perform Kerberos authentication for Integrated Windows Authentication (IWA) This interface is used by Avaya Aura Services application to perform time synchronization (NTP) This interface is used by the Avaya Aura Services to send SNMP traps to remote Network Management s or Avaya Secure Access Link (SAL) Gateway This interface is used by the Avaya Aura Services to perform Certificate Management (SCEP), WebLM licensing and logs forwarding Avaya Matrix: Avaya Equinox Product Offerings 40 P a g e

41 Source Network / Application Protocol Optionally Enabled / Disabled? Default State Avaya Aura Services Avaya 2009 TCP/JMX No Open This interface is used to interoperate with the Avaya Data Replication Service (DRS) Avaya Aura Services LDAP Server 3268 configurable TCP/LDAP Yes Open This interface is used by the Avaya Aura Services to perform user provisioning, authentication and authorization Avaya Aura Services LDAP Server 3269 configurable TCP/LDAP over TLS Yes Open This interface is used by the Avaya Aura Services to perform user provisioning, authentication and authorization Avaya Aura Services Avaya UDP/SNMP No Open This interface is used by the Avaya Aura Services to send SNMP traps to Avaya Avaya Aura Services (remote) Avaya Aura Services 8441 TCP/HTTPS No Open This interface is used by the Avaya Aura Services server to interoperate with other Avaya Aura Services servers in a multi-site deployment Services Clients Avaya Aura Services 443 TCP/HTTPS No Open This interface is used by the Avaya Aura Services -enabled clients to consume the device services Avaya Aura Services Avaya Aura Services 8448 TCP/HTTPS No Open This interface is used by the Avaya Aura Services application for load-balancing purposes Avaya Aura Services Avaya Aura Services 8442 TCP/HTTPS Yes Closed This interface is used by Avaya Aura Services to pass web deployment requests without certificate validation. Avaya Aura Web Gateway(AA WG) Avaya Aura Services 8440 TCP/HTTPS No Closed This interface is used by Avaya Aura Services application for accepting the server-toserver request via Optional certificate policy for AAWG connections. Avaya Aura Services Avaya Aura Services 1543 TCP/HTTPS Yes Open This interface is used by Avaya Aura Services to server the 46xxsettings.txt file required by hard endpoints. Equinox Management Avaya Aura Services 3354 TCP/HTTPS No Open This interface is used by the Equinox Management server to establish a persistent connection to Avaya Aura Services to enable event notification and synchronization of conference user information. Avaya Matrix: Avaya Equinox Product Offerings 41 P a g e

42 NOTE: For LDAP connections, port 389 (TCP) and port 636 (TLS) could also be used. For backward compatibility, AADS enabled clients could also connect to AADS using port Avaya Matrix: Avaya Equinox Product Offerings 42 P a g e

43 Usage Diagram Avaya Matrix: Avaya Equinox Product Offerings 43 P a g e

44 11. Avaya Multimedia Messaging (AMM) Reference link : Avaya Multimedia Messaging 3.x Matrix Source Table Table 8: s for Multimedia Messaging Management Interface (eth0) Network / Application Protocol Optionally Enabled / Disabled? Default State administrator s desktop or SAL Gateway Avaya Multimedia Messaging 22 TCP/SSH No Open This interface provides Linux shell access for system installation/administration administrator s desktop or 3 rd -party Network Management (NMS) Avaya Multimedia Messaging 161 UDP/SNMP No Open This interface allows a remote SNMP agent to retrieve MIB information Avaya Avaya Multimedia Messaging 2009 TCP/JMX No Open This interface is used to interoperate with the Avaya Data Replication Service (DRS) Avaya Multimedia Messaging Avaya Multimedia Messaging 5701 TCP No Open This interface is used by the Openfire component for clustering capability Avaya Multimedia Messaging (Cassandra) Avaya Multimedia Messaging (Cassandra) 7000 TCP No Open This interface is used by the Cassandra database to replicate data between clustered nodes Avaya Multimedia Messaging (Cassandra) Avaya Multimedia Messaging (Cassandra) 7001 TCP/TLS No Open This interface is used by the Cassandra database to replicate data (over a secure channel) between clustered nodes Avaya Matrix: Avaya Equinox Product Offerings 44 P a g e

45 Source Admin terminal (browser) Avaya Multimedia Messaging Avaya Multimedia Messaging Avaya Multimedia Messaging Avaya Multimedia Messaging Avaya Multimedia Messaging Avaya Multimedia Messaging Avaya Multimedia Messaging (GlusterFS) DNS server 53 Kerberos Server (Domain Controller) Network / Application Protocol Optionally Enabled / Disabled? Default State 8445 TCP/HTTPS No Open 8451 TCP/HTTPS No Open TCP No Open 88 UDP and TCP/DNS UDP/ Kerberos Avaya Multimedia Messaging Administrative Graphical User Interface. This web-based interface can be used to manage the Avaya Multimedia Messaging application This interface is used by the Mobicents component for clustering capability This interface is used by the glusterfs distributed file system No Open This interface is used by the Avaya Multimedia Messaging application to perform DNS resolution Yes Open This interface is used by the Avaya Multimedia Messaging application to perform Kerberos authentication for Integrated Windows Authentication (IWA) Avaya Multimedia Messaging NTP time server 123 UDP/NTP No Open This interface is used by Avaya Multimedia Messaging application to perform time synchronization (NTP) Avaya Multimedia Messaging Avaya SAL Gateway and/or NMS 162 UDP/SNMP No Open This interface is used by the Avaya Multimedia Messaging to send SNMP traps to remote Network Management s or Avaya Secure Access Link (SAL) Gateway Avaya Multimedia Messaging Avaya Aura 443 TCP/HTTPS No Open This interface is used by the Avaya Multimedia Messaging to perform Certificate Management (SCEP), WebLM licensing and logs forwarding Avaya Multimedia Messaging Avaya 2009 TCP/JMX No Open This interface is used to interoperate with the Avaya Data Replication Service (DRS) Avaya Matrix: Avaya Equinox Product Offerings 45 P a g e

46 Source Network / Application Protocol Optionally Enabled / Disabled? Default State Avaya Multimedia Messaging LDAP Server 3268/ configurable UDP/SNMP Yes Open This interface is used by the Avaya Multimedia Messaging to send SNMP traps to remote Network Management s or Avaya Secure Access Link (SAL) Gateway Avaya Multimedia Messaging Avaya UDP/SNMP No Open This interface is used by the Avaya Multimedia Messaging to send SNMP traps to Avaya Source Avaya Aura Session and Microsoft Lync Avaya Aura Session and Microsoft Lync Avaya Multimedia Messaging (remote) Messaging-enabled Clients Avaya Multimedia Messaging Avaya Presence Server Table 9: s for Multimedia Messaging Signaling Interface (eth0) Avaya Multimedia Messaging Avaya Multimedia Messaging Avaya Multimedia Messaging Avaya Multimedia Messaging Avaya Multimedia Messaging Avaya Multimedia Messaging Network / Application Protocol TCP/SIP over TLS TCP/SIP over TLS Optionally Enabled / Disabled? No No Default State Open Open 8441 TCP/HTTPS No Open 8443 TCP/HTTPS No Open 8448 TCP/HTTPS No Open 8453 TCP/HTTPS No Open This interface is used by the Avaya Multimedia Messaging application to interoperate with Lync and the Session This interface is used by the Avaya Multimedia Messaging application to interoperate with Lync and the Session This interface is used by the Avaya Multimedia Messaging server to interoperate with other Avaya Multimedia Messaging servers in a multi-site deployment This interface is used by the Avaya Multimedia Messaging-enabled clients to consume the Avaya Multimedia Messaging services This interface is used by the Avaya Multimedia Messaging application for load-balancing purposes This interface is used by the Avaya Multimedia Messaging to interop with the Avaya Presence Services over REST Avaya Matrix: Avaya Equinox Product Offerings 46 P a g e

47 Source Network / Application Protocol Optionally Enabled / Disabled? Default State Avaya Multimedia Messaging Microsoft Lync 5061 TCP/SIP over TLS No Open This interface is used by the Avaya Multimedia Messaging application to interoperate with Lync and the Session Avaya Multimedia Messaging Avaya Aura Session 5061 TCP/SIP over TLS No Open This interface is used by the Avaya Multimedia Messaging application to interoperate with Lync and the Session NOTE: For LDAP connections, port 389 (TCP) and port 636 (TLS) could also be used. Avaya Matrix: Avaya Equinox Product Offerings 47 P a g e

48 Usage Diagram Avaya Matrix: Avaya Equinox Product Offerings 48 P a g e

49 12. Avaya Aura Web Gateway (AAWG) Reference link : Web Gateway Matrix Table Source administrator s desktop or SAL Gateway administrator s desktop or 3rd-party Network Management (NMS) Table 10: s for Web Gateway Management Interface (eth0) Network / Application Protocol Optionally Enabled / Disabled? Default State AAWG 22 TCP/SSH Yes Open AAWG 161 UDP/SNMP No Open mgmt requiring shell access (See Note 1) This interface allows a remote SNMP agent to retrieve MIB information Scopia management (iview) AAWG 3341 TCP/XML No Open This interface allows a remote Scopia management (iview) server to establish a persistent proprietary connection to the al server component for receiving iview event notifications. Scopia management (iview) AAWG 3343 TCP/XML No Open This interface allows a remote Scopia management (iview) server to establish a persistent proprietary connection to the Call Signaling Agent component for receiving iview event notifications. AAWG Clustered Nodes AAWG 7000 TCP Yes Open This interface is used by the Cassandra database to replicate data between clustered nodes AAWG Clustered Nodes AAWG 7001 TCP over TLS Yes Open This interface is used by the Cassandra database to replicate data (over a secure channel) between clustered nodes Avaya Matrix: Avaya Equinox Product Offerings 49 P a g e

50 Source Network / Application Protocol Optionally Enabled / Disabled? Default State Web Browser / Web Management Interface AAWG 8445 TCP/HTTPS No Open Avaya Aura Web Gateway Administrative Graphical User Interface. This web-based interface can be used to manage the Avaya Aura Web Gateway application Web Browser / Web Management Interface (TE+Conf) AAWG 8446 TCP/HTTPS No Open Avaya Aura Web Gateway Administrative Graphical User Interface. This web-based interface can be used to manage the Avaya Aura Web Gateway application AAWG Clustered Nodes AAWG Clustered Nodes AAWG Clustered Nodes AAWG 8451 TCP/HTTPS No Open This interface is used by the Telscale component for clustering capability AAWG 9042 TCP/Binary No Open This interface is used by the Cassandra database (client-server communication) AAWG 9160 TCP/Thrift No Open This interface is used by the Cassandra database (client-server communication) AAWG DNS server 53 UDP/DNS No N/A This interface is used by the Avaya Aura Web Gateway application to perform DNS resolution AAWG DNS server 53 TCP/DNS No N/A This interface is used by the Avaya Aura Web Gateway application to perform DNS resolution AAWG NTP server 123 UDP/NTP No N/A This interface is used by the Avaya Aura Web Gateway application to perform time synchronization (NTP) AAWG Avaya SAL Gateway and/or NMS 162 UDP/SNMP No N/A This interface is used by the Avaya Aura Web Gateway to send SNMP traps to remote Network Management s or Avaya Secure Access Link (SAL) Gateway AAWG Avaya Aura (1- TCP/HTTPS No N/A This interface is used by the Avaya Aura Web Gateway to perform Certificate Management (SCEP), WebLM licensing and logs forwarding Avaya Matrix: Avaya Equinox Product Offerings 50 P a g e

51 Source Network / Application Protocol Optionally Enabled / Disabled? Default State AAWG Syslog server 443 UDP/SYSLOG Yes N/A This interface is used by the Avaya Aura Web Gateway to perform system logging AAWG AAWG AAWG AAWG AAWG AAWG Customer s LDAP server Customer s LDAP server AAWG Clustered Nodes AAWG Clustered Nodes AAWG Clustered Nodes Avaya Aura (1- TCP/LDAP Yes N/A 514 (1- TCP/LDAP over TLS TCP over TLS Yes Yes N/A Open 3269 TCP/Binary No Open (1- TCP/Thrift No Open 7000 UDP/SNMP Yes N/A This interface is used by the Avaya Aura Web Gateway to perform user provisioning, authentication and authorization This interface is used by the Avaya Aura Web Gateway to perform user provisioning, authentication and authorization This interface is used by the Cassandra database to replicate data (over a secure channel) between clustered nodes This interface is used by the Cassandra database (client-server communication) This interface is used by the Cassandra database (client-server communication) This interface is used by the Avaya Aura Web Gateway to send SNMP traps to Avaya NOTE: For LDAP connections, port 389 (TCP) and port 636 (TLS) could be used. Avaya Matrix: Avaya Equinox Product Offerings 51 P a g e

52 Source Table 11: s for Web Gateway Application Signaling Interface (eth0) Network / Application Protocol Optionally Enabled / Disabled? Default State Avaya Aura Session AAWG 5060 TCP/SIP Yes Closed Avaya Aura Session AAWG 5061 TCP/SIP over TLS Scopia iview AAWG 5080 TCP/SIP Scopia iview AAWG 5081 TCP/SIP over TLS Avaya Aura Web Gateway-enabled clients Avaya Aura Web Gateway-enabled clients AAWG AAWG AAWG AAWG AAWG AAWG 8443 AAWG 8444 Avaya Aura Session / Scopia iview Avaya Aura Session / Scopia iview Avaya Aura Presence Services Avaya Aura Media Server Avaya Aura Services TCP/HTTPS TCP/HTTPS No No No No No Closed Open Open Open Open 5060 TCP/SIP No N/A 5061 TCP/SIP over TLS No N/A 5269 TCP/XMPP Yes N/A 7151 SRTP Yes N/A 8443 TCP/HTTP over TLS No N/A This interface is used by the Avaya Aura Web Gateway application to receive SIP messages This interface is used by the Avaya Aura Web Gateway application to receive secure SIP messages. This interface allows unencrypted SIP communication to be received in the Conferencingonly deployment This interface allows encrypted SIP communication to be received in the Conferencing-only deployment This interface is used by the Avaya Aura Web Gateway-enabled clients to consume the Avaya Aura Web Gateway services This interface is used by the Avaya Aura Web Gateway for detecting traffic coming through the SBC This interface is used by the Avaya Aura Web Gateway application for SIP communications between Avaya Aura Session and Scopia iview This interface is used by the Avaya Aura Web Gateway application for SIP communications over TLS between Avaya Aura Session and Scopia iview This interface is used by the Avaya Aura Web Gateway to interop with the Avaya Presence Services over XMPP This interface is used by the Avaya Aura Web Gateway to interop with the Avaya Aura Media Server This interface is used by the Avaya Aura Web Gateway to interop with the Avaya Aura Services NOTE: For backward compatibility, AADS supports port 443 and port Therefore, AAWG can connect to AADS using port 443 or port Avaya Matrix: Avaya Equinox Product Offerings 52 P a g e

53 Avaya Matrix: Avaya Equinox Product Offerings 53 P a g e

54 Usage Diagram Avaya Matrix: Avaya Equinox Product Offerings 54 P a g e

55 13. Avaya Session Border Controller for Enterprise (ASBCE) Reference link : Session Border Controller for Enterprise Matrix Table Source Table 12: s for ASBCE Management Interface (M1, M2) Network / Application Protocol Optionally Enabled / Disabled? Default State Admin terminal or SAL Gateway MGMT 222 SSH No Open mgmt requiring shell access Admin terminal or NMS OAMP UDP/SNMP No Open SNMP queries to ASBCE Client Web browser MGMT 443 TCP/HTTPS No Open Apache Tomcat webserver running MGMT on EMS WebLM Server TCP No Closed Connectivity with WebLM server from EMS MGMT on ASBCE WebLM server TCP No Closed MGMT 123 External NTP server 123 UDP No Open Connectivity with WebLM server from ASBCE NTP time sync MGMT on ASBCE MGMT on EMS 514 UDP Yes Closed Syslog to EMS MGMT on ASBCE MGMT on EMS External Syslog server 514 UDP Yes Closed External Syslog server 514 UDP yes Closed Syslog to external syslog server Syslog to external syslog server M2 on ASBCE M2 on ASBCE 1950 TCP No Open Inter-ASBCE communication for HA MGMT on ASBCE 53 DNS server 53 UDP No Closed DNS service MGMT MGMT 5432 TCP No Open DB service MGMT on EMS/SBC MGMT 5432 TCP No Open DB Service Bidirectional Replication EMS-SBC and SBC- SBC MGMT on EMS/SBC MGMT 222 SSH No Open Bidirectional between EMS-SBC and SBC-SBC MGMT on ASBCE MGMT on ASBCE External RADIUS Server External SFTP server 1813 (1024- RADIUS Yes Closed Radius Interface to send accounting DATA. port range is configurable from (1- SFTP Yes Closed SFTP from ASBCE to CDR Adjunct. Avaya Matrix: Avaya Equinox Product Offerings 55 P a g e

56 Source SIP endpoints SIP endpoints SIP endpoints SIP endpoints, WebRTC clients HTTP clients SIP endpoints, WebRTC clients HTTP clients Table 13: s for ASBCE data ports (A1, A2, B1, B2) SIP Signaling SIP Signaling SIP Signaling 5060 ( ( (1024- Network / Application Protocol TCP/SIP UDP/SIP TCP/SIPS Optionally Enabled / Disabled? Yes Yes Yes Default State Closed Closed Closed SIP Signaling 80 TCP/HTTP Yes Closed SIP Signaling 443,9443 TCP/HTTPS Yes Closed SIP endpoints SIP Signaling 843 TCP/HTTPS No Open Web Collab SIP signaling traffic this is the default value, but other ports can be configured for SIP signaling using the ASBCE EMS SIP signaling traffic this is the default value, but other ports can be configured for SIP signaling using the ASBCE EMS SIP signaling traffic this is the default value, but other ports can be configured for SIP signaling using the ASBCE EMS Web Collab, Config file, firmware download, PPM configuration data downloaded to SIP endpoints, WebRTC Web Collab, Config file, firmware download, PPM configuration data downloaded to SIP endpoints, WebRTC SIP endpoints SIP Signaling 5222 TCP/XMPP No Open XMPP behind NAT STUN/TURN 3478 TCP/TURN- STUN Yes Closed Used for STUN/TURN Public Peer STUN/TURN TCP/TURN STUN Yes Closed Used for Media Relay from and to public peer Server behind NAT Configured port Reverse Proxy SIP end points, media servers ASBCE Configured port Configured. Range Reverse Proxy Avaya Media Server (AMS) ( (1024- TCP/HTTP Yes Closed Used for connect side UDP/RTP, UDP/RTCP, UDP/SRTP, UDP/SRTCP HTTP/SOAP Yes Yes Closed Closed SIP voice traffic. The exact port is negotiated on a per call basis External AMS HTTP/SOAP Message exchange NOTE: On next up issue of ASBCE, Table and Diagram should add AADS and AMM port usage. Avaya Matrix: Avaya Equinox Product Offerings 56 P a g e

57 Usage Diagram Avaya Matrix: Avaya Equinox Product Offerings 57 P a g e

58 14. Avaya Aura Media Server (AAMS) Reference link : Media Server 7.8 Source Table Admin terminal or SAL Gateway Other Media Servers in Cluster Admin terminal or SAL Gateway Table 14: s for All Addresses (binds to IPv ) Host platform AAMS 3306 Host Platform N/A AAMS 5997 N/A AAMS 5998 N/A AAMS 5999 External Application Server External Application Server External Management Server External Management Server Admin terminal or SAL Gateway Admin terminal or SAL Gateway Other Media Servers in Cluster Network / Application Protocol Optionally Enabled? 22 TCP/SSH No TCP/Propri etary No 3389 TCP/RDP Yes TCP/Propri etary TCP/Propri etary TCP/Propri etary AAMS 7150 TCP/HTTP Yes AAMS 7151 TCP/HTTPS No AAMS 7410 TCP/SOAP Yes AAMS 7411 TCP/SOAP No AAMS 8080 TCP/HTTPS Yes AAMS 8443 TCP/HTTPS No AAMS N/A AAMS N/A AAMS N/A AAMS TCP/Propri etary TCP/Propri etary TCP/Propri etary TCP/Propri etary No No No No No Yes Yes Default State / Firewall State Open/ management requiring shell access (Linux) Allowed Open/ Database replication (MariaDB) Allowed Open/ Remote desktop access to server (Windows) Blocked Open/ Internal AAMS communication (srp) Blocked Open/ Internal AAMS communication (srp) Blocked Open/ Internal AAMS communication (srp) Blocked Closed/ HTTP RESTful control interface Allowed Open/ HTTPS RESTful control interface Allowed Open/ SOAP control interface Allowed Open/ SOAP control interface Allowed Open/ HTTPS access to AAMS Element Allowed Open/ HTTPS access to AAMS Element Allowed Open/ IvrMP Stream Source data Allowed Open/ Internal AAMS communication (sc) Blocked Open/ Internal AAMS communication (vxml) Blocked Open/ Internal AAMS communication (vxml) Blocked Avaya Matrix: Avaya Equinox Product Offerings 58 P a g e

59 Source N/A AAMS Network / Application Protocol TCP/Propri etary Optionally Enabled? NTP Server AAMS 123 UDP/NTP No Admin terminal or SAL Gateway AAMS ( ) N/A AAMS 1027 UDP/SNMP UDP/Propri etary SIP Servers AAMS 5060 UDP/SIP Yes Yes No No Default State / Firewall State Closed/ Blocked Open/ Allowed Open/ Allowed Open/ Blocked Closed/ Allowed Internal AAMS communication (vxml) Network Time Protocol communication SNMP data and traps Internal AAMS communication (plicd) SIP UDP signaling traffic Avaya Matrix: Avaya Equinox Product Offerings 59 P a g e

60 Source Other Media Servers in Cluster Other Media Servers in Cluster Table 15: s for Service Address (Host or HA IPv4 service address) AAMS 1028 AAMS 4005 Network / Application Protocol TCP/ Proprietary TCP/ Proprietary Optionally Enabled / Disabled? SIP Servers AAMS 5060 TCP/SIP Yes SIP Servers AAMS 5061 TCP/SIP TLS Yes N/A AAMS 7095 Other Media Servers in Cluster Other Media Servers in Cluster Other Media Servers in Cluster Other Media Servers in Cluster AAMS AAMS AAMS AAMS 1028 SIP Endpoints AAMS (1024- TCP/ Proprietary TCP/ Proprietary TCP/ Proprietary TCP/ Proprietary UDP/ Proprietary UDP/RTP Yes No Yes No No No Yes No Default State Closed/ Allowed Open/ Allowed Open/ Allowed Open/ Allowed Closed/ Blocked Open/ Allowed Open/ Allowed Open/ Allowed Closed/ Blocked Open/ Allowed Proprietary AAMS communication (for high availability) Proprietary AAMS communication (sc) SIP over TCP signaling traffic SIP over TLS signaling traffic Proprietary AAMS communication (VTXMP) Proprietary AAMS communication (cstore) Proprietary AAMS communication (cstore) Proprietary AAMS communication (IvrMP) Proprietary AAMS communication (for high availability) RTP and SRTP media traffic Avaya Matrix: Avaya Equinox Product Offerings 60 P a g e

61 Source Table 16: s for IPv6 Service Address (Host or HA IPv6 service address) Network / Application Protocol Optionally Enabled / Disabled? SIP Servers AAMS 5060 UDP/SIP Yes SIP Servers AAMS 5060 TCP/SIP Yes SIP Servers AAMS 5061 TCP/SIP TLS Yes SIP Endpoints AAMS UDP/RTP No Default State Closed/ Allowed Open/ Allowed Open/ Allowed Open/ Allowed SIP UDP signaling traffic SIP over TCP signaling traffic SIP over TLS signaling traffic RTP and SRTP media traffic. The RTP port range can be configured within AAMS Element, but the ports used must fall within this range and there must be enough ports for 2 times the desired audio, video and WebRTC session capacity. Avaya Matrix: Avaya Equinox Product Offerings 61 P a g e

62 Source Table 17: s for Local Address (loopback) Network / Application Protocol Optionally Enabled / Disabled? Default State N/A AAMS 199 TCP/SNMP No Open SNMP data and traps N/A AAMS 4001 N/A AAMS 4004 N/A AAMS 4011 N/A AAMS 4014 N/A AAMS 4015 N/A AAMS 4016 N/A AAMS 7080 N/A AAMS 7081 N/A AAMS 7093 N/A AAMS 7094 N/A AAMS 7149 TCP/ Proprietary TCP/ Proprietary TCP/ Proprietary TCP/ Proprietary TCP/ Proprietary No No No No No Open Open Open Open Open TCP/ Proprietary No Open TCP/ Proprietary No Open TCP/ Proprietary Yes Open TCP/ Proprietary Yes Open TCP/ Proprietary Yes Open TCP/ Proprietary No Open Internal AAMS communication (IvrMP) Internal AAMS communication (mmc) Internal AAMS communication (IvrMP) Internal AAMS communication (mmc) Internal AAMS communication (sc) Internal AAMS communication (VidMP) Internal AAMS communication (ConfMP) Internal AAMS communication (VidMP) Internal AAMS communication (FntMP) Internal AAMS communication (FntMP) Internal AAMS communication (WebUA) Avaya Matrix: Avaya Equinox Product Offerings 62 P a g e

63 Usage Diagram Avaya Matrix: Avaya Equinox Product Offerings 63 P a g e

64 15. Avaya Conferencing 9.1 Reference link : (not published yet) Source Table Source Network Protocol and Table 18: Avaya Equinox Management s Network Protocol and Requirement Administrator Management Client XML Secure Clients Equinox Management TCP ports TCP s TCP 7 (Management) TCP Equinox Management Equinox Management Elite MCU TCP 80 (HTTP) TCP 443 (HTTPS) TCP 3336/3346 (XML over TLS) TCP 7 (management) TCP 1720 (CS) UDP 1719 (RAS) TCP (H.245) Enables administrator web client to access Equinox Management administrative web portal. These ports support Cloud connection and provisioning services. Enables secure XML connection from secure clients Management, registration, managing meetings via Equinox Management for any XML secure clients Note: CS = Call Signaling TCP (XML) 3336, 3338 TCP (XML over TLS) 3346, TCP (HTTPS) ports Avaya Equinox Streaming and Recording (AESR) 3348 TCP (HTTPS) 443 Management communication (REST) TCP (H.245) H.323 Terminals Consult the vendor Call setup, Signaling, Management Equinox Management TCP 5060 TCP TLS 5061 documentation to confirm ports used. SIP terminals TCP 5060 TCP TLS 5061 SIP call setup, signaling and management BFCP Avaya Matrix: Avaya Equinox Product Offerings 64 P a g e

65 Source Source Network Protocol and Network Protocol and Requirement Equinox Management UDP 1719 (RAS) TCP (H.245) H.323 Edge TCP 7 (management) UDP 1719 (RAS) TCP and UDP H.323 Edge Call setup and registration *** Default TCP port range - configurable via the H.323 Edge 15000*** TCP 3358 (XML) TLS (3369) (XML) Server web interface HTTP 8095 HTTPS 8445 Equinox Management Equinox Management ports TCP TCP ports DNS Server LDAP Server Active Directory Server Sony PCS Address Book, MCM, TCP 8089 XML API DNS Server UDP 53 LDAP server 389 LDAP over SSL 636 AD Server TCP/UDP 445 NTLM SSO TCP 25 SMTP TCP 23 (Telnet) DNS Name Resolution LDAP Integration LDAP over SSL Single Sign-On (SSO) Server Integration Enables use of Sony PCS Address Book Recommended if Sony endpoints are deployed Endpoints Equinox Management TCP Scopia Video Gateway, Equinox TIP Gateway, Scopia SIP Gateway TCP 3336 (XML) Enables communication between Equinox and Scopia Video, SIP and TIP Gateways if deployed with Scopia Video, SIP and/or TIP Gateways Equinox Management Equinox Management TCP TCP ports IBM Domino Server TCP (DIIOP) IBM SameTime TCP 3341 Enables connection with IBM Domino Server Cannot communication with SameTime Server if deployed with Domino Server if deployed with SameTime Server Avaya Matrix: Avaya Equinox Product Offerings 65 P a g e

66 Source Source Network Protocol and Network Protocol and Requirement Equinox Management TCP 7 (management) UDP 162 (SNMP traps) TCP Equinox Media Server / MCU TCP 7 (management) TCP 1720 (RAS) (from / to ECS) UDP 1719 (RAS) (from / to ECS) TCP (H.245) (from / to ECS) TCP 3336, 3338 (XML) TCP 3346, 3348 (XML Management, registration, SNMP traps, managing meetings via Equinox Management. Enables receiving alarms from Web Collaboration Server Equinox Management TCP 5556, 8095, 8445 TCP Equinox Media server / Web Collaboration Server WCS (with 6000) over TLS) TCP 8080, 9443 TCP 80, 443 TCP 7 (management) TCP 1720 (RAS) (from / to ECS) UDP 1719 (RAS) (from / to ECS) TCP (H.245) (from / to ECS) TCP 3336, 3338, 3346, 3348 Management, registration, SNMP traps, managing meetings via Equinox Management. Enables receiving alarms from Web Collaboration Server when Web Collaboration Server is deployed TCP 8080, 9443 Equinox Management TCP Equinox Media Server, Platform (PMGR). TCP 80, 443 TCP 3358 (XML) TLS 3368 (XML) TCP 8095 TCP 8445 Administration & Control Internal File Transfer Upgrades Logs PMGR is an internal component which manages the local platform and is controlled by Equinox Management. These ports are required for distributed servers on remote branches. Note: Equinox Management 9.1 supports H.323 Edge 9.0 and H.323 Edge 9.1. For H.323 Edge 9.0, the PMGR port is TCP 22- the SSH port. Avaya Matrix: Avaya Equinox Product Offerings 66 P a g e

67 Source Source Network Protocol and Network Protocol and Requirement Equinox Management TCP/UDP 5060 TLS 5061 TCP Equinox Media Server AMS +WCS TCP/UDP 5060 TLS 5061 TCP 7150 SIP Signaling Web Admin GUI SOAP Management Server Equinox Management Equinox Management Equinox Management Equinox Management Equinox Management Equinox Management Equinox Management TCP/UDP 5060 TLS 5061 TCP TCP TCP TCP TCP TCP TCP Equinox Media Server / WebRTC Gateway (with 6000) TLS 7151 TCP 7410 TLS 7411 TCP 8080, 9443 TCP 80, 443 TCP/UDP 5060 TLS 5061 TCP 7150 TLS 7151 TCP 7410 TLS 7411 Web Gateway TCP 3343 TLS 3353 SNMP UDP 161 Unified al TCP 3341 TLS 3351 HTTPS 8446 Avaya AADS TCP 3344 TLS 3354 Avaya SBCE HTTP 80 HTTPS 443 DNS Server DNS 53 (UDP) NTP Server NTP 123 (UDP) XT Series with no TCP (XT Software support for Cloud Upgrade) Provisioning TCP (XT AT Commands) SIP Signaling Web Admin GUI SOAP Management Server Administration Control Administration Control Administration Control Monitoring DNS NTP Management of XT Series where Cloud Provisioning is not supported or disabled if managing XT Series 8.3.x or disabling XT Provisioning Avaya Matrix: Avaya Equinox Product Offerings 67 P a g e

68 Source Administrative Client Equinox Media Server/MCU with WCS /WCS only (for 6000) Source Network Protocol and TCP s Table 19 : Equinox Media Server s Always blocked Network Protocol and TCP 8085 ( HTTP) TCP 8445 (HTTPS - HTTP over SSL) TCP 21 (FTP) TCP 22 (SSH) H.323 Edge UDP ** Audio and Video media Elite 6000 MCU /Media server MCU (Cascade) Equinox Streaming & Recording TCP (H.245) UDP (Video RTP) UDP FECC (H224) UDP (Audio RTP) UDP MCU web interface MCU web interface when using HTTPS Audio stream recording CLI Real-time access to MCU logs Audio and Video Media from Elite MCU to H.323 Edge Server * Default ports used by H.323 Edge Server, can be modified. Configuring s on the H.323 Edge server Audio and Video Media between cascaded Media server & Elite MCUs RTP Audio, Video, Presentation Values can be changed in CP admin GUI (range is 1025 Optional. If blocked, access to the MCU web interface; SSH and FTP access will not be possible. for audio and video for audio and video when using AESR Server (CP) ISDN Video Gateway TCP TCP 1820 (Q931) UDP UDP UDP H.245 signaling IVR Audio RTP (even numbered ports) and RTCP (odd numbered ports) IVR Video RTP (even numbered ports) and RTCP (odd numbered ports) Audio and Video Media (RTP - even numbered ports; RTCP odd numbered ports) for media between ISDN Video Gateway and Equinox Media Server Avaya Matrix: Avaya Equinox Product Offerings 68 P a g e

69 Source Source Network Protocol and Network Protocol and Equinox Media Server/MCU with WCS /WCS only (for 6000) SIP PROTOCOL TCP/UDP 5060 (SIP signaling) TCP 5061 (SIP Signaling using TLS) TCP (BFCP) UDP (Video RTP) UDP FECC UDP (Audio RTP) TCP (H.245) TCP (XML APIs) TCP/UDP 5060 (SIP Signaling) TCP 5061 (SIP Signaling using TLS) TCP (H.245) UDP 1719 (RAS) SIP Terminals Elite MCU Media server MCU Media server AMS UDP port range TCP 443 Equinox Management ECS or H.323 Gatekeeper Endpoint TCP and UDP s TCP (BFCP - TCP) UDP (Video RTP) UDP FECC TCP 443 UDP (Audio RTP) TCP 7 (management) TCP (H.245) UDP 1719 (RAS) TCP 1720 (Q931) Audio and video media, RTCP Audio and Video Media between cascaded Equinox Media Servers for SIP calls 443 for Web collaboration Registration, Admission, Session Control, Q931 signaling for SIP calls for media between cascaded Equinox Media Servers for MCUs managed by Equinox Management for H.323 Calls TCP 1720 (Q931) TCP Media Server/AMS - UDP range DNS Server NTP Server Client or another media server TCP DNS 53 (UDP) NTP 123 (UDP) SIP: TCP/UDP 5060 SIP: TLS 5061 TCP 7150 TLS 7151 DNS NTP Administrator Web Interface SOAP Management Server Optional This is for audio media UDP port range depends on client Avaya Matrix: Avaya Equinox Product Offerings 69 P a g e

70 Source Source Network Protocol and Network Protocol and Equinox Media Server/MCU with WCS /WCS only (for 6000) Media Server/MCU - UDP range UDP UDP (Audio RTP) UDP (Video RTP) UDP FECC Media Server / WebRTC Gateway - UDP range UDP 3478 for STUN/TURN Client or another media server Elite 6000 SIP: TCP/UDP 5060 SIP: TLS 5061 TCP 3336, 3338 (XML) TCP 3346, 3348 (XML over TLS) UDP port range depends on client UDP (Video RTP) UDP (Audio RTP) UDP FECC Avaya SBCE UDP 3478 Monitoring XML Admin Management Server This is for audio and video media Avaya Matrix: Avaya Equinox Product Offerings 70 P a g e

71 Source Elite MCU Source Network Table 20 : Elite MCU s Network Protocol and Protocol and H.323 PROTOCOL H.323 Terminals *Refer to Manufacturer s documentation for TCP and UDP ports TCP (H.245) TCP 3337 (XML to Elite MCU) UDP FECC H.323 Edge UDP * UDP (Audio RTP) Audio and Video media Elite MCU UDP (Video RTP) (Cascade) UDP FECC UDP (Audio RTP) TCP , 3337 Equinox Streaming & Recording Server (CP) ISDN Video Gateway TCP UDP TCP TCP 1820 (Q931) UDP UDP UDP Audio and video media, RTCP Audio and Video Media from Elite MCU to H.323 Edge Server Audio and Video Media between cascaded Elite MCUs RTP Audio and video H.245 signaling IVR Audio RTP (even numbered ports) and RTCP (odd numbered ports) IVR Video RTP (even numbered ports) and RTCP (odd numbered ports) Audio and Video Media (RTP - even numbered ports; RTCP - odd numbered ports) for audio and video for audio and video for audio and video between two cascaded MCUs when using AESR for media between ISDN Video Gateway and Elite MCU Avaya Matrix: Avaya Equinox Product Offerings 71 P a g e

72 Source Source Network Protocol and SIP PROTOCOL TCP/UDP 5060 (SIP signaling) TCP 5061 (SIP Signaling using TLS) TCP (BFCP) UDP (Video RTP) UDP FECC UDP (Audio RTP) SIP Terminals Web Collaboration Server Network Protocol and * Refer to Manufacturer s documentation for TCP and UDP ports used TCP/UDP 5060 (SIP signaling) TCP 5061 (SIP TLS) TCP/UDP (SIP BFCP) UDP (RTP Media) Audio and video media, RTCP, BFCP Audio and video media, RTCP, BFCP for SIP calls when using WCS Elite MCU Elite MCU (Cascade) TCP (BFCP - TCP) UDP (Video RTP) UDP FECC UDP (Audio RTP) Audio and Video Media between cascaded Elite MCUs for SIP calls for SIP Signaling and media TCP (H.245) TCP (XML APIs) TCP/UDP 5060 (SIP Signaling) TCP 5061 (SIP Signaling using TLS) TCP UDP 1719 (RAS) TCP 1720 (Q931) Equinox Management/ B2BUA ECS Gatekeeper TCP 7 (management) TCP *Default Linux s (H.245) UDP 1719 (RAS) TCP 1720 (Q931) Default Linux TCP port range is which can be modified. Default Linux TCP port range is which can be modified. Registration, Admission, Session Control, Q931 signaling for MCUs managed by Equinox Management for H.323 Calls Avaya Matrix: Avaya Equinox Product Offerings 72 P a g e

73 Source Elite MCU Source Network Network Protocol and Protocol and TCP Always blocked TCP 8085 ( HTTP) MCU web interface TCP 8445 (HTTPS HTTP over SSL) MCU web interface when using TCP 21 (FTP) HTTPS TCP 22 (SSH) Audio stream recording Real-time access to MCU logs TCP DNS TCP 53 DNS name resolution Optional Optional. If blocked, access to the MCU web interface; SSH and FTP access will not be possible. Avaya Matrix: Avaya Equinox Product Offerings 73 P a g e

74 Source H.323 Edge Client Any External H.323 s H.323 Edge Source Network Protocol and Table 21 : Edge ports s H.323 Edge TCP/UDP 3089 All TCP/UDP traffic UDP 1719 TCP 1720 TCP/UDP (H.460 Signaling & Media) TCP/UDP (DPA Signaling & Media) TCP/UDP UDP 1719 (RAS) TCP H.323 Edge Any External H.323 s Elite MCUs/ Media Server (MCU) Internal H.323 s Equinox Management with ECS Gatekeeper Network Protocol and UDP1719,TCP1720, TCP/UDP (H.460 Signaling & Media), TCP/UDP (DPA Signaling & Media) All TCP/UDP traffic allowed UDP (Video RTP) UDP FECC UDP (Audio RTP) TCP Refer to Manufacturer s documentation for TCP and UDP ports. UDP 1719 (RAS) TCP 1720 (Q931) Default Linux TCP port range is which can be modified. Required for H.323 Edge Client to Register with H.323 Edge Server H.323 traffic from H.323 devices in public network inbound to H.323 Edge public interface. Any traffic from H.323 Edge public interface outbound to public network (inbound traffic is restricted as described in the above row.) H.323 Edge Media to MCU and H.323 terminals All H.225 and H.245 traffic will be directed to Gatekeeper Registration of H.323 Edge and proxy registrations of external devices * Default Linux TCP s Default Windows TCP ports Requirement when using H.323 Edge Client for signaling and media between external devices and H.323 Edge server. for media and signaling between external devices and H.323 Edge Server. for media and signaling between internal H.323 devices and the H.323 Edge Server for H.323 Calls TCP * DNS Server TCP/UDP 53 Required for H.323 URI Dialing for H.323 URI Dialing Avaya Matrix: Avaya Equinox Product Offerings 74 P a g e

75 Source XT EP, Equinox 3.x client or Any External SIP client Source Network Protocol and Table 22 : ASBCE Edge s Network Protocol and s ASBCE Edge TCP 5061, 5060 TCP/UDP Required for external SIP connectivity Requirement when using SIP End point XT EP, Equinox 3.x client or Any External SIP client s ASBCE Edge UDP port Range (configurable) Required for external SIP connectivity media when using SIP client Web meet me (webrtc) / Equinox client 3.x / XT (for web collaboration) / Client access to the Unified al s ASBCE Edge TCP 443 TCP 8443 Required for Unified al, web meet me (webrtc) signaling and web collaboration server for external http https Client access to the Unified al (includes scheduling, participating, and accessing recordings) Web meet me (webrtc) s ASBCE Edge UDP 3478 UDP port Range (configurable) Required for external web meet me connectivity media when using web meet me client ASBCE Edge s Management (Unified al/ web GW) or web gateway ASBCE Edge s Media server / WCS only ASBCE Edge s Elite 6000 MCU Media server ASBCE Edge s Management / B2BUA TCP 443 TCP 8443 TCP 443 UDP (Video RTP) UDP FECC UDP (Audio RTP) AMS UDP UDP (Video RTP) UDP FECC UDP (Audio RTP) TCP UDP 5060 Required for Unified al, web meet me (webrtc) signaling Required for Unified al, web meet me (webrtc) signaling Audio and Video Media to Media server & Elite MCUs For external XT connectivity in OTT when using web meet me client when using web meet me client for audio and video media for XT SIP connectivity ASBCE Edge s DNS Server TCP/UDP 53 Required for H.323 URI Dialing for URI Dialing Avaya Matrix: Avaya Equinox Product Offerings 75 P a g e

76 Source Source Network Protocol and Table 23 : XT Desktop s XT Desktop Server TCP ports XT Series TCP (XTD XML API) Network Protocol and Sip/H.323 calls: TCP 1720 (H225/Q931) TCP/UDP s TCP * (H225/H245) UDP *(RTP/RTCP) TCP/UDP 5060 UDP *(BFCP) XT Desktop Client s XT Desktop Server TCP 80 (HTTP) TCP 443 (HTTPS) UDP ** Enables XML controls Allows H.323 and sip calls Provides access to the XT Desktop Web al Enables RTP media tunneling if UDP s are blocked Audio and video media Requirement Avaya Matrix: Avaya Equinox Product Offerings 76 P a g e

77 Source XT Series or EP in an H.323 call Source Network Protocol and TCP/UDP s TCP * (H225/H245) UDP *(RTP/RTCP) Table 24 : XT Series s XT Series uses ephemeral ports in the range H.323 Gatekeeper PathFinder Network Protocol and RAS signaling UDP 1719 (RAS) UDP 1718 (RAS GK autodiscovery to multicast IPv4 address ) Enable gatekeeper/ PF services and call signaling Requirement for H.323 deployments Q931 and H245 call signaling (when managed by GK) TCP 1720 (H225/Q931) TCP ports H.323 EP/XT/Elite MCU Q931 and H245 call signaling TCP 1720 (H225/Q931) TCP * (H225/H245)(XT) or TCP ports Media UDP *(RTP/RTCP)(XT) or ephemeral UDP ports H.323 signaling, audio and video media RTP/RTCP for H.323 calls * Other EPs/MCUs may use different ephemeral port ranges XT Series or endpoint in a SIP call TCP/UDP s TCP *(BFCP) UDP * (RTP/RTCP) SIP Clients/XT and Servers SIP and BFCP call signaling TCP/UDP 5060 (SIP) TCP 5061 (SIP TLS) UDP *(BFCP) TCP/UDP ephemeral s SIP and BFCP signaling, audio and video media RTP/RTCP for SIP calls Media UDP *(RTP/RTCP) or ephemeral UDP ports * Other EPs/MCUs may use different ephemeral port ranges Avaya Matrix: Avaya Equinox Product Offerings 77 P a g e

78 Source Source Network Protocol and Network Protocol and XT Series ports STUN Server UDP Discover the presence of a NAT and public IPv4 address assigned by the NAT Requirement Recommended for autodiscovery of XT public IPv4 address XT Series ports XMPP Presence Server TCP 5222 TLS communication to XMPP server to use presence services with Aura, IPO or generic XMPP servers XT Series ports FTP/SFTP Server AESR TCP 21 File transfer from XT to a server (recorded files or NetLog files) Recommended XT Series ports DNS Server UDP 53 Resolve DNS names XT Series ports Internet Servers/ Web Collab Server/ Equinox Management TCP 80** (HTTP) TCP 443** (HTTPS) NAT autodiscovery and geolocalization services. Scopia Mobile Service. Web Collab service. Cloud connection and provisioning services XT Series ports Simple Network Time Protocol Server XT Series ports Equinox Management/ Management servers UDP 123 (SNTP) UDP 162 (SNMP) TCP 389 (LDAP) TCP 3336 (SM XML API) Enables receiving Internet UTC time from SNTP server Enables management and SNMP traps. Enables receiving contact information from Equinox Management LDAP directory or from third party LDAP servers. Enable receiving roster information in a call. XT Series ports SNMP Server UDP 161 Enables sending of SNMP traps XT Series ports LDAP Server TCP 389 (LDAP) Enables requests to LDAP server for contact information Recommended Recommended when not using cloud connection. Recommended if using external LDAP remote directory Avaya Matrix: Avaya Equinox Product Offerings 78 P a g e

79 Source Source Network Protocol and Network Protocol and XT Series ports XTD client TCP 8554 (RTSP) Enables XT Series to receive a presentation from a PC/MAC via Screen Link XT Series ports Equinox H.323 Edge TCP/ UDP/ (H.460) Enables XT series to use H.460 with Equinox H.323 Edge server. XT Desktop Server ports XT Series TCP (XTD XML API) Enables XML controls and receives XT status XTD client ports XT Series TCP 80(HTTP) TCP 443 (HTTPS) Manual activation of Screen link/mobile Link Equinox Management ports XT Series TCP 3341 (SM XML API) TCP (Sw upgrade with unsigned packages) TCP (AT commands) UDP 161 (SNMP) Scopia Control Application (ipad/iphone) XT Sw Update Application (Windows PC) XT SDK API Client (Creston/Extron) Scopia XT PC Control Application (Windows PC/Mac) Enables notifications for Roster and calendar; software upgrade and XT management when not using Cloud Mode ports XT Series TCP Enable the Scopia Control application to communicate with XT ports XT Series TCP (Sw upgrade with unsigned packages) TCP (Sw upgrade with signed packages) ports XT series TCP (AT commands) TCP ports XTE240 in Personal or Shared Endpoint mode 22 (SSH) TCP UDP Any browser ports XT series TCP 80 (HTTP) TCP 443 (HTTPS) Enable upgrade of XT software using with a Windows PC application Enables XT management from third party devices Allow the Scopia XT Control app for Windows and Mac to manage XTE240 for remote management Allow to access the XT web server for remote management Requirement for Screen Link Recommended. H.460 reduces ports needed per call and enables certain functionality Recommended when XT is not managed in Cloud Mode for Scopia Control to upgrade XT using the PC app Optional *The maximum port range is specified. The used port range could be lower than the specified one, depending on available license and active settings. Please check on XT UI (Networks>Preferences>Dynamic ports> Manual mode) for the used range. ** A different port can be configured on the Equinox Management server for Cloud Provisioning server. Avaya Matrix: Avaya Equinox Product Offerings 79 P a g e

80 Source Source Network Protocol and Table 25 : ISDN Gateway s Network Protocol and Management PC s Scopia ISDN Gateway TCP 21 (FTP) Enables Gateway upgrades Management PC s Scopia ISDN Gateway TCP 23 (Telnet) Enables viewing of logs Recommended Management PC/Web client s Scopia ISDN Gateway TCP 80 (HTTP) TCP 443 (HTTPS) Provides access to the Gateway web Interface Management PC/Web client Management PC or Equinox Management s Scopia ISDN Gateway TCP 80 (HTTP) TCP 443 (HTTPS) Provides access to the Gateway web Interface s Scopia ISDN Gateway UDP 161 (SNMP) Enables SNMP management Scopia ISDN Gateway s Equinox Management or Traps Server UDP 162 (SNMP) Traps TCP UDP 1619 (Q931) H.323 s s UDP 1719 (RAS) UDP 1820 (RAS) TCP 1620 (IVR) TCP 1503 (T.120) UDP (RTP/RTCP IVR audio) UDP (RTP/RTCP IVR video) UDP (RTP/RTCP) TCP Equinox UDP 1619 (IVR Management TCP registration) UDP 1719 (RAS) Enables SNMP Traps Enables H.245 signaling Enables Q.931 signaling Enables sending RAS messages Enables receiving RAS messages Enables IVR over TCP Enables T.120 data collaboration IVR Audio Management Enables H.245 signaling Enables IVR registration with Gatekeeper Enables RAS Requirement TCP 443 if using HTTPS TCP 443 if using HTTPS when communication with Gatekeeper Avaya Matrix: Avaya Equinox Product Offerings 80 P a g e

81 Source Source Network Protocol and Table 26 : Scopia MCU (R5) s Network Protocol and Management PC TCP ports Scopia MCU (R5) TCP 80 (HTTP) TCP 443 (HTTPS) Management PC FTP Server TCP s Scopia MCU (R5) TCP 21 (FTP) Provides access to the MCU Administrator and Conference Control web interfaces Enables upgrade via utility Enables audio stream recording Requirement if using HTTPS Optional Scopia MCU (R5) TCP 1720 (Q931) TCP (H.245) Any H.323 TCP ports Cannot connect H.323 calls UDP Any H.323 or SIP device UDP s Enables audio and media streams TCP 2010 (MPI) Any MP standalone units TCP Cannot use external MP if deployment is (MCUs in MP clustering configured in MP clustering mode) mode TCP/UDP 5060 (SIP) Any SIP device s Enables SIP signaling for SIP Calls UDP 1719 (RAS) H.323 Gatekeeper UDP s Enables RAS signaling TCP 3337 (XML) Scopia MCU (R5)s TCP Enables cascade between 2 Scopia MCU (R5)s TCP 3336 (XML) Equinox Management TCP s Enables management of the MCU via XML API UDP 162 (SNMP) SNMP Trap Server UDP 161 (SNMP) Enables SNMP traps to be sent to SNMP server Scopia MCU Telnet Client TCP ports Enables viewing of MCU logs and initial configuration tasks TCP 2946 TCP 3340 Scopia MCU (R5) TCP Cannot connect to the MCU Cannot work with non- English Fonts UDP Any H.323 or SIP device UDP s Cannot transmit/receive audio and video media Streams if deployment contains multiple Scopia MCU (R5)s with Equinox Management if deployed with Equinox Management Recommended Optional Avaya Matrix: Avaya Equinox Product Offerings 81 P a g e

82 Source Source Network Protocol and Table 27 : WCS s Network Protocol and Web Collaboration Client TCP s WCS s TCP 80 (HTTP) TCP 443 (HTTPS) TCP 843 Web Collaboration Server TCP 3336, 3338, 3346, 3348 TCP 8080, 9443 TCP/UDP 5060 (SIP) TCP 5061 (SIP over TLS) Equinox Management TCP 5556, 8095, 8445 TCP Equinox Management Scopia Elite MCU TCP TCP (Elite MCU) UDP (RTP) TCP WCS web interface WCS web interface (HTTP over SSL) Client Flash Policy server Facilitates WCS Administration SIP signaling UDP (RTP) Scopia Elite MCU RTP presentation traffic BFCP TCP/UDP presentation traffic TCP DNS UDP 53 FQDN resolution Requirement Avaya Matrix: Avaya Equinox Product Offerings 82 P a g e

83 Table 28 : Streaming and Recording s In the tables below, an Equinox Streaming and Recording client is any web browser using the Streaming and Recording tab of the Equinox Unified al. The acronym SR stands for streaming and recording. Source Administrator web browser Administrator remote desktop client Equinox SR Client Source Network Protocol and TCP (HTTPS), TCP s TCP (RDP) TCP s TCP (HTTP, HTTPS), TCP s Network Protocol and SR TCP (HTTPS) 8445 SR Admin Web Interface SR TCP (RDP) 3389 Remote Desktop to SR TCP 80 (HTTP) TCP 443 (HTTPS) SR TCP s Conference Point TCP (HTTPS) 443 TCP s Delivery Node TCP (HTTPS) 443 Communicate with to list / watch recordings / broadcasts XML for communication and push of media files XML for communication and push of media files TCP s Virtual Delivery Node TCP (HTTPS) 443 XML for communication TCP s Equinox Management TCP (HTTPS) 443 API for Management Communication the TCP port is defined by Equinox Management TCP s Equinox SR Transcoder TCP (XML) 8443 XML Communication with transcoder TCP s SMTP Server TCP (SMTP) 25 SMTP ( ) Communication UDP and TCP s DNS Server UDP (DNS) 53 TCP (DNS) 53 DNS name resolution Requirement for administrators Optional if using CDN Optional Optional UDP s NTP Server UDP (NTP) 123 Network Time Server Optional Avaya Matrix: Avaya Equinox Product Offerings 83 P a g e

84 Source Administrator web browser Administrator remote desktop client Conference Point (CP) Source Network Protocol and TCP (HTTPS), TCP s TCP (RDP) TCP s Conference Point (CP) Windows server hosting CP Network Protocol and Requirement TCP (HTTPS) 8445 CP Admin Web Interface for administrators TCP (RDP) 3389 Remote Desktop to Optional Windows Host TCP s SR TCP (XML) 443 Management communications TCP s Transcoder TCP (XML) 8443 Communication between s Media Streams TCP s Transcoder TCP (Windows Media Stream) CP pulls media from the XXXX transcoder UDP s Transcoder UDP (AAC-LC) XXX CP pulls media from the transcoder UDP s ECS Gatekeeper UDP (RAS) 1719 RAS communication with the gatekeeper TCP s ECS Gatekeeper TCP (Q.931) 1720 RAS communication with the gatekeeper (call setup) TCP s ECS Gatekeeper RAS communication with the gatekeeper. You can limit the range on the gatekeeper. UDP and TCP s DNS Server UDP (DNS) 53 DNS name resolution if multicast if multicast Optional UDP s NTP Server TCP (DNS) 53 UDP (NTP) 123 Network Time Server Optional Avaya Matrix: Avaya Equinox Product Offerings 84 P a g e

85 Source Administrator web browser Source Network Protocol and TCP (HTTPS), TCP s Network Requirement Protocol and DN TCP (HTTPS) 8445 DN Admin Web Interface for administrators Equinox SR Client Equinox SR Client Administrator remote desktop client Delivery Node (DN) TCP (HTTP, HTTPS), TCP s TCP (HTTP, HTTPS), TCP s TCP (RDP) TCP s Delivery Node (DN) TCP (HTTP, HTTPS, HLS) 80, 443 Delivery Node (DN) TCP 80 TCP 554 TCP 1755 Windows server hosting DN TCP (RDP) 3389 media to clients for broadcasts and recordings (HLS, Progressive Download) media to clients for broadcasts (using multicast, Windows Media Streaming) *** if Multicast is enabled Remote Desktop to Windows Host TCP s CP TCP 80 RTP media (windows media streaming). for multicast Optional Delivery Node (DN) Delivery Node (DN) UDP s Equinox SR Client UDP - Multicast Range TCP s DN TCP 80 (HLS, Windows Media) TCP 443 (HLS) CP gets raw RTP from Scopia Elite MCU then sends it to the transcoder to encode to Windows Media. Then, it pulls back from the transcoder and makes it available to the DN When using MMS and the network is Multicast-capable, the standard port range for multicast will be used. DN to DN media transfer Delivery Node (DN) UDP, TCP s Equinox SR Client UDP TCP 1755 HTTP (Windows Media) 80 When doing Windows Media, Client will try UDP between port (Only open the necessary number of ports), then TCP on port 1755, then TCP on port 80 when doing MMS Avaya Matrix: Avaya Equinox Product Offerings 85 P a g e

86 Source Delivery Node (DN) Delivery Node (DN) Source Network Protocol and TCP s Equinox SR Transcoder Network Protocol and TCP 8080 TCP 8443 Communication between devices; access to HLS media Requirement TCP s SR TCP 443 (XML) Management communication Delivery Node (DN) UDP and TCP s DNS Server UDP (DNS) 53 TCP (DNS) 53 DNS name resolution Optional Delivery Node (DN) UDP s NTP Server UDP (NTP) 123 Network Time Server Optional Avaya Matrix: Avaya Equinox Product Offerings 86 P a g e

87 Source Administrator remote desktop client Equinox SR Transcoder Source Network Protocol and TCP (RDP) TCP Network Protocol and Transcoder TCP (RDP) 3389 Remote Desktop to s Transcoder TCP s Conference Point TCP 80 Transcoder pulls ASR Media Stream from the CP TCP s Conference Point TCP 1755 TCP 8080 TCP 8443 Delivery Node TCP s SR TCP 443 (XML) Windows Media Stream Management communication Requirement Optional for multicast Source Administrator web browser TCP (HTTPS), Source Network Protocol and TCP s Network Protocol and VDN TCP (HTTPS) 8445 VDN Admin Web Interface Requirement for administrators Virtual Delivery Node (VDN) TCP s Delivery Node TCP 80 TCP 443 HLS Media Stream TCP 80 Session Border Controller (SBC) TCP 443 Media Streams to clients TCP s SR TCP 443 (XML) Management communication UDP and TCP s DNS Server UDP (DNS) 53 TCP (DNS) 53 DNS name resolution Optional UDP s NTP Server UDP (NTP) 123 Network Time Server Optional Avaya Matrix: Avaya Equinox Product Offerings 87 P a g e

88 Source Administrator remote desktop client Content Delivery Network (CDN) Source Network Protocol and TCP (RDP) TCP s Windows server hosting VDN Network Protocol and TCP (RDP) 3389 Remote Desktop to Windows Host TCP s Virtual Delivery Node TCP (HLS Media) 80, 443 Uploading content from VDN to CDN Requirement Optional Session Border Controller (SBC) TCP s Virtual Delivery Node TCP (HLS Media) 80, 443 If the VDN is not accessible from the outside, then you need a Session Border Controller (SBC) which will route from the CDN to the VDN Routes between the CDN and the VDN if the VDN is not accessible from CDN if VDN is not accessible from CDN Avaya Matrix: Avaya Equinox Product Offerings 88 P a g e

89 Source Source Network Protocol and Table 29 : VC240 s Network Protocol and Management PC s VC240 TCP 80 (HTTP) TCP (HTTPS) Equinox s VC240 TCP 23 (Telnet) UDP 4000 (RV Shell) Management APC Client s VC240 TCP 22 (SSH) VC240 s TFTP Server UDP 69 (TFTP) Access to the VC240 web interface via HTTP or HTTPS Management (including configuration) of VC240 from Equinox Management SSH access to VC240; software upgrades Software upgrade via TFTP server Requirement if accessing the VC240 web interface Recommended Recommended Optional s Gatekeeper UDP 1719 (RAS) Enables RAS signaling Recommended TCP 1720 (Q931) Any H.323 s s Enables Q931 signaling TCP (H.245) Enables H.245 signaling Recommended UDP Audio and Video Media (RTP/RTCP) TCP/UDP (5060) SIP Any SIP device s Enables SIP signaling for SIP TCP (API) API application s UDP 161 (SNMP) Any SNMP Trap server UDP 162 (SNMP) Access to API for remote access and upgrades Enables sending SNMP traps calls if pgrading via the web if using SNMP servers Avaya Matrix: Avaya Equinox Product Offerings 89 P a g e

90 Source Scopia Video Gateway Source Network Protocol and Table 30 : Video Gateway s Network Protocol and ports Microsoft STUN server TCP 443 (STUN) Enables remote SIP ICE connectivity UDP 1719 (RAS) TCP 1720 (Q931) TCP (H.245) TCP 3336 (XML) TCP 3338 (XML) TCP 3346 (XML - TLS) TCP 3348 (XML - TLS) Any H.323 device ports Enables H.245 signaling, Registration with Gatekeeper Equinox Management TCP Enables management and configuration via Gateway XML API Requirement for remote endpoint connectivity Cannot connect H.323 calls or register with Gatekeeper if using TLS H.323 PROTOCOL TCP (H.245) TCP 3337 (XML to Elite MCU) UDP (Video RTP) UDP (Audio RTP) Elite MCUs/Equinox Media Server (MCU) TCP (BFCP - TCP) UDP (Video RTP) UDP (Audio RTP) Audio and Video Media between cascaded Elite MCUs for SIP calls for media between cascaded Elite MCUs UDP 3478 (STUN) STUN Server ports Enables remote endpoints to connect TCP/UDP 5060 (SIP) Any SIP device ports Enables SIP Signaling TCP 5061 (SIP- TLS) Enables secure SIP Signaling if using TLS Avaya Matrix: Avaya Equinox Product Offerings 90 P a g e

91 Source Scopia Video Gateway Source Network Protocol and UDP (RTP/RTCP/SRTP) UDP (RTP/RTCP/SRTP) TCP (RTP/RTCP/SRTP) TCP (RTP/RTCP/SRTP) Any SIP or H.323 Network Protocol and ports Audio media stream Video media stream Audio media over TCP Video media over TCP Requirement UDP 162 (SNMP) SNMP Server UDP 161 (SNMP) SNMP traps Recommended TCP 21 (FTP) FTP Server ports TCP 22 (SSH) SSH Client ports TCP 80 (HTTP) Management PC ports Enables audio stream recording Enables viewing of gateway logs in real time Enables Gateway upgrade or download of customer support package Optional Optional Avaya Matrix: Avaya Equinox Product Offerings 91 P a g e

92 Source Source Network Protocol and UDP 1719 (RAS) TCP 1720 (Q931) TCP (H.245) TCP 3336 (XML) TCP 3338 (XML) TCP 3346 (XML - TLS) TCP 3348 (XML - TLS) Table 31 : SIP Gateway s Network Protocol and Any H.323 device ports Enables H.245 signaling, Registration with Gatekeeper Equinox Management ports Enables management and configuration via Gateway XML API UDP 3478 (STUN) STUN Server ports Enables remote endpoints to connect TCP/UDP 5060 (SIP) TCP 5061 (SIP- TLS) UDP (RTP/RTCP/SRTP) UDP (RTP/RTCP/SRTP) Any SIP device ports Enables SIP signaling Enables secure SIP signaling Any SIP or H.323 ports Audio media stream Video media stream Audio media over TCP Video media over TCP Requirement Cannot connect H.323 calls or register with Gatekeeper. It is mandatory to open the management port. Use 3336 and 3338 if not using TLS, use 3346 and 3348 if using TLS. It is mandatory to open the management port. Use 5060 if not using TLS, use 5061 if using TLS. UDP 162 (SNMP) SNMP Server UDP 161 (SNMP) SNMP traps Recommended TCP 21 (FTP) FTP Server ports Enables audio stream Optional recording TCP 22 (SSH) SSH Client ports Enables viewing of gateway logs in real time Optional TCP 80 (HTTP) Management PC ports Enables Gateway upgrade or download of customer support package Avaya Matrix: Avaya Equinox Product Offerings 92 P a g e

93 Scopia TIP Gateway Source Source Network Protocol and Table 32 : TIP Gateway s Network Protocol and TCP 443 (STUN) Microsoft STUN server ports Enables remote SIP ICE connectivity UDP 1719 (RAS) Any H.323 device ports Enables H.245 TCP 1720 (Q931) signaling, TCP (H.245) Registration with Gatekeeper TCP 3336 (XML) TCP 3338 (XML) TCP 3346 (XML - TLS) TCP 3348 (XML - TLS) Equinox Management ports Enables management and configuration via Gateway XML API UDP 3478 (STUN) STUN Server ports TCP/UDP 5060 (SIP) TCP 5061 (SIP- TLS) UDP (RTP/RTCP/SRTP) UDP (RTP/RTCP/SRTP) Enables remote endpoints to connect Any SIP device ports Enables SIP signaling Enables secure SIP signaling Any SIP or H.323 ports Audio media stream Video media stream Requirement for remote endpoint connectivity Cannot connect H.323 calls or register with Gatekeeper. if using TLS if using TLS UDP 162 (SNMP) SNMP Server UDP 161 (SNMP) SNMP traps Recommended TCP 21 (FTP) FTP Server ports Enables audio Optional stream recording TCP 22 (SSH) SSH Client ports Enables viewing of Optional gateway logs in real time TCP 80 (HTTP) Management PC ports Enables Gateway upgrade or download of customer support package Avaya Matrix: Avaya Equinox Product Offerings 93 P a g e

94 Unified al Source Source Network Protocol and TCP 3341 (XML) TCP 3343 (XML) TCP 3351 (XML - TLS) TCP 3353 (XML - TLS) HTTPS 8446 HTTPS 8443 HTTPS 8444 TCP/UDP 5060 (SIP) TCP 5061 (SIP- TLS) Table 33 : Unified al/web Gateway s Equinox Management Network Protocol and ports Enables management and configuration via XML API Requirement if using TLS Web Browser ports Enables browser to access Any SIP device ports Enables SIP signaling Enables secure SIP signaling TCP 22 (SSH) SSH Client ports Enables viewing of logs in real time if using TLS Optional Avaya Matrix: Avaya Equinox Product Offerings 94 P a g e

95 16. Avaya Aura Session (SM) Reference link : Session 7.1.x Matrix Table Table 34 : s on Session network interface for Management & other Application Components (eth0) Source Network / Optionally Default Application Enabled / Protocol Disabled? State Ingress or incoming connections Admin terminal or SAL Gateway Local Session 22 TCP/SSH No Open mgmt requiring shell access Admin terminal or NMS Local Session 161 UDP/SNMP No Closed SNMP queries to Session Local Session 1298 TCP/JNDI No Open JNDI name service Local Session 1299 TCP/RMI No Open RMI name service Local Session 2009 TCP/JMX No Open JMX traffic for DRS Local Session 4073 TCP/EJB3 No Open EJB3 remote invoker Local Session 4644 TCP/JMX No Open JMX JRMP remote invoker Local Session 4645 TCP/JBoss No Open JBoss remote invoker Local Session 4657 TCP/JBoss No Open JBoss Messaging bisocket transport Local Session 6446 TCP/JBoss No Open Remoting connector Avaya Matrix: Avaya Equinox Product Offerings 95 P a g e

96 Source Network / Application Protocol Optionally Enabled / Disabled? Default State Cassandra on other Session s in a Cluster Local Session 7001 TLS/Gossip Yes Closed Provides communication channel between Cassandra nodes on Session instances in a cluster when Data Storage Clustering is enabled. Other Session s in Cluster Local Session 7800 TCP/JGroup No Open Messaging between other Session s in a cluster Other Session s in Cluster Local Session 7801 TCP/JGroup No Open Messaging between other Session s in a cluster (only used during error conditions) (See Note 2) Other Session s in Cluster Local Session 7802 TCP/JGroup No Open Messaging between other Session s in a cluster (only used during error conditions) (See Note 2) Other Session s in Cluster Local Session 7803 TCP/JGroup No Open Messaging between other Session s in a cluster (only used during error conditions) (See Note 2) Other Session s in Cluster Local Session 7804 TCP/JGroup No Open Messaging between other Session s in a cluster Local Session 8643 TCP/HTTPS No Open File transfer / REST WS over HTTPS Avaya Aura Services Local Session 9042 TLS/CQL Yes Closed for Cassandra database queries an AADS is paired with the Session. Local Session 9572 TCP /Proprietary No Closed Transfer log files to Other s Local Session UDP No Open for SAL-Agent s SNMP traffic Local Session TCP/RMI No Open RMI registry Local Session TCP/JMX No Open JMX traffic Avaya Matrix: Avaya Equinox Product Offerings 96 P a g e

97 Source Network / Application Protocol Optionally Enabled / Disabled? Default State Egress or outgoing connections Local Session SSH Server 22 TCP No Open For external ssh access Local Session Domain Name Server (DNS) 53 TCP No Open For FQDN resolution Local Session Local Session Local Session Local Session Local Session Local Session Local Session Local Session Local Session Local Session Local Session Local Session Local Session Web Server (http) 80 TCP No Open For fetching CRLs over http NTP Server (ntp) 123 UDP No Open To sync system clock with remote NTP servers SAL Gateway and/or NMS 162 UDP/SNMP No Open SNMP traps from Session 443 HTTPS No Open Serviceability Agent communication to SMGR Remote Syslog Server 514 (1- TCP Yes Closed For logging to a Remote Syslog server TCP/JMX No Open JSR 160 JMX Connector 1398 TCP/JNDI No Open JNDI name service 1399 TCP/RMI No Open RMI name service 2009 TCP/JMX No Open JMX traffic for DRS 3873 TCP/RMI No Open EJB RMI 4446 TCP/JBoss No Open 4744 TCP/JMX No Open UDP/SNMP No Open Remoting connector JMX JRMP remote invoker SNMP Traps From Session To Avaya Matrix: Avaya Equinox Product Offerings 97 P a g e

98 Source Network / Application Protocol Optionally Enabled / Disabled? Default State Local Session Cassandra on other Session s in a Cluster 7001 TLS/Gossip Yes Closed Provides communication channel between Cassandra nodes on Session instances in a cluster when Data Storage Clustering is enabled. Local Session Local Session 7500 UDP/JBoss No Open Intra-Session communication Local Session Other Session s in Cluster TCP/JGroup No Open Messaging between other Session s in a cluster (only used during error conditions) Local Session Local Session UDP/JGroup No Open Intra-Session communication Local Session Local Session UDP/JGroup No Open Intra-Session communication Avaya Matrix: Avaya Equinox Product Offerings 98 P a g e

99 Source SIP Servers Table 35 : s on Session network interface for Security Module (secmod) (eth1) Local Session NA Network / Application Protocol ICMP /Type 0,8 Optionally Enabled / Disabled? Yes Default State Open Used by SIP entities to verify connectivity to Session SIP endpoints Local Session 80 TCP/HTTP No Open PPM configuration data downloaded to SIP endpoints (See Notes 1, 5) SIP endpoints Local Session 443 TCP/HTTPS No Open PPM configuration data downloaded to SIP endpoints (See Notes 2, 5) SIP Servers and SIP endpoints Local Session 5060 (1024- UDP/SIP Yes Closed SIP signaling traffic this is the default value, but other ports can be configured for SIP signaling using the (See Notes 1, 3, 4, 6) SIP Servers and SIP endpoints Local Session 5060 (1024- TCP/SIP Yes Closed SIP signaling traffic this is the default value, but other ports can be configured for SIP signaling using the (See Notes 1, 3, 4, 6) SIP Servers and SIP endpoints Local Session 5061 (1024- TCP/SIPS Yes Closed SIP signaling traffic this is the default value, but other ports can be configured for SIP signaling using the (See Notes 2, 3, 4, 6) CS1000 Network Control Server Local Session UDP /Proprietary Yes Closed Interoperability with CS1000 networks through TPS Local Session Local Session Local Session Local Session SIP Servers NA SIP Servers and SIP endpoints SIP Servers and SIP endpoints SIP Servers and SIP endpoints 5060 ( ( (1024- ICMP /Type 0,8 Yes Open Used to test status of SIP trunk to SIP Servers UDP/SIP Yes Closed TCP/SIP Yes Closed TCP/SIPS Yes Closed SIP signaling traffic this is the default value, but other ports can be configured for SIP signaling using the (See Notes 1, 3, 4, 6) SIP signaling traffic this is the default value, but other ports can be configured for SIP signaling using the (See Notes 1, 3, 4, 6) SIP signaling traffic this is the default value, but other ports can be configured for SIP signaling using the (See Notes 2, 3, 4, 6) Avaya Matrix: Avaya Equinox Product Offerings 99 P a g e

100 NOTES: Used when encryption is not required. Used for encrypted communication. The SIP signaling port can be configured to use any valid port number in the range For SIP communications, the alternative transport options are UDP, TCP, or TLS. For PPM communications, the alternative port options are 80 for unsecure HTTP communication, or 443 for secure communication. These ports are opened dynamically by Asset, and closed when Asset is stopped. Avaya Matrix: Avaya Equinox Product Offerings 100 P a g e

101 Usage Diagram Avaya Matrix: Avaya Equinox Product Offerings 101 P a g e

102 17. Avaya Aura (SMGR) Reference link : Matrix Table Source Admin terminal or SAL Gateway, Peer SMGR Table 36 : s for Interface (eth0) SMGR 22 Network / Application Protocol TCP- SSL/SSH Optionally Enabled / Disabled? Default State Yes Open Management requiring shell access. Peer SMGR in Geographic Redundancy (GR) deployment CS1K SMGR 53 UDP/DNS Yes Closed CS1K SMGR 53 TCP/DNS Yes Closed Local DNS used by CS1K in case DNS is not configured in network. This port will get disabled in Military Grade Hardening mode. Local DNS used by CS1K in case DNS is not configured in network. This port will get disabled in Military Grade Hardening mode. Admin Terminal SMGR 80 TCP No Open Request on this port redirects to port 443. CS1K SMGR 111 UDP Yes Closed RPC Bind port (portmap). This port will get disabled in Military Grade Hardening mode. CS1K SMGR 111 TCP Yes Open RPC Bind port (portmap). This port will get disabled in Military Grade Hardening mode Admin terminal or NMS SMGR 161 UDP/SNMP No Open SNMP queries to Admin terminal or NMS SMGR 162 UDP/SNMP No Open SNMP queries to Avaya Matrix: Avaya Equinox Product Offerings 102 P a g e

103 Source Admin Terminal, Peer SMGR, Session, Presence, MX, Avaya Aura Conferencing (AAC), CS1K/Call Pilot, CE, AMS Network / Application Protocol Optionally Enabled / Disabled? Default State SMGR 443 TCP/HTTPS No Open Peer SMGR, CS1K and/or Call Pilot SMGR Peer SMGR, Session and CE SMGR TCP- SSL/LDAP TCP- SSL/JBOSS No Open File Transfer from element to through serviceability agent Web browser request coming from Admin Terminal Web service calls coming from element to DRS Pull requests coming from element to WebLM licensing requests coming from element to HTTPS/Web Service calls between peer SMGR in Geographic Redundancy (GR) deployment Secured LDAP connection from CS1K/Call Pilot to SMGR for subscriber data exchange Secured LDAP connection between peer SMGR in Geographic Redundancy (GR) deployment for directory replication No Open RMI name service running on SMGR Peer SMGR, Session, Presence and SMGR 1399 TCP/JBOSS No Open JNDI name service running on SMGR CE N/A SMGR 1461 UDP/JBOSS No Open JBoss SNMP agent listening port N/A SMGR 1462 UDP/JBOSS No Open JBoss SNMP manager trap receiver listening port CLI login SMGR 1812 UDP No Open RADIUS service UDP port for CLI mode common login Session, Presence and CE SMGR 2009 TCP- SSL/JMX No Open JMX traffic for DRS from element to CS1K SMGR 2049 TCP/NFS No Open Used by deployment manager CS1K application. This port will get disabled in Military Grade Hardening mode CS1K SMGR 2049 UDP/NFS No Open Used by deployment manager CS1K application. This port will get disabled in Military Grade Hardening mode Peer SMGR, Session and CE SMGR 3873 TCP- SSL/JBOSS No Open EJB3 remoting connector listening port TCP/NFSST SMGR 4001 CS1K ATD Yes Closed Used by deployment manager CS1K application CS1000 SMGR TCP- SSL/JBOSS Yes Closed TCP port for clustered JNDI Stub download CS1000 SMGR TCP- SSL/JBOSS Yes Closed TCP port for RMI queries on the clustered JNDI Peer SMGR SMGR ICMP Ping No Open ICMP Ping between peer SMGR Avaya Matrix: Avaya Equinox Product Offerings 103 P a g e

104 Source Peer SMGR (Only if CS1K is used) Peer SMGR (Only if CS1K is used) Peer SMGR (Only if CS1K is used) Session, Presence and CE Peer SMGR (Only if CS1K is used) Peer SMGR (Only if CS1K is used) Peer SMGR (Only if CS1K is used) Peer SMGR (Only if CS1K is used) Peer SMGR (Only if CS1K is used) B5800, Avaya Aura Conferencing, Legacy WebLM client SMGR SMGR SMGR SMGR 2009 SMGR SMGR SMGR SMGR SMGR SMGR N/A SMGR SMGR SMGR SMGR CM Media Gateway, SDM Remote Software Library CM Media Gateway, SDM Remote Software Library CM, CM Media Gateway, B5800, Session Dynamic s( Network / Application Protocol TCP- SSL/JBOSS TCP-SSL /JBOSS TCP-SSL /JBOSS TCP- SSL/JMX TCP-SSL /JBOSS Optionally Enabled / Disabled? Default State No Open JBoss HA partition multicast. This port will get disabled in Military Grade Hardening mode. No Open JBoss Post Office Data Channel multicast. This port will get disabled in Military Grade Hardening mode. No Open JBoss Post Office Data Channel multicast. This port will get disabled in Military Grade Hardening mode. No Open TCP- SSL/JBOSS No Open TCP- SSL/JBOSS No Open UDP/ JBOSS No Open UDP/ JBOSS No Open TCP- SSL/WebL M JMX traffic for DRS from element to No Open JBoss Post Office Data Channel multicast. This port will get disabled in Military Grade Hardening mode. No Open UDP No Open 20 TCP/FTP Yes N/A 21 TCP/FTP Yes N/A 22 TCP- SSL/SSH Yes N/A JBoss Post Office Data Channel multicast. This port will get disabled in Military Grade Hardening mode. JBoss Post Office Data Channel multicast. This port will get disabled in Military Grade Hardening mode. JBoss HA partition multicast. This port will get disabled in Military Grade Hardening mode. JBoss Post Office Data Channel multicast. This port will get disabled in Military Grade Hardening mode. WebLM port for accepting licensing requests Dynamic ports opened by JBoss running on SMGR File transfer to CM Media Gateway. File transfer between SMGR and SDM Remote Software Library. Also used for SDM functionality. File transfer to CM Media Gateway. File transfer between SMGR and SDM Remote Software Library. Also used for SDM functionality. Inventory discovery of CM, CM Media Gateway, Session, B5800 and other Avaya Products. Also used for SDM functionality. Avaya Matrix: Avaya Equinox Product Offerings 104 P a g e

105 Source Network / Application Protocol Optionally Enabled / Disabled? Default State SMGR SDM Remote Software Library 22 TCP- SSL/SCP Yes N/A File transfer between SMGR and SDM Remote Software Library. Used for SDM functionality. SMGR SMGR SMGR SMGR SMGR SDM Remote Software Library Webserver hosting SDM Alternate Source NTP server CM, CM Media Gateway, B5800, Session, MX, Avaya Aura Conferencing (AAC), CS1K/Call Pilot, CE SAL Gateway and/or NMS 22 TCP- SSL/SFTP Yes N/A File transfer between SMGR and SDM Remote Software Library. Used for SDM functionality. 80 TCP/HTTP No N/A File transfer from SDM Alternate Source. Used for SDM functionality. 123 NTP No Open 161 UDP/SNMP Yes N/A NTP server communication SNMP set requests from to elements. Also used for SDM functionality for CM, CM Media Gateway, CM TN Boards, Session, B UDP/SNMP Yes N/A SNMP traps from SMGR SMGR SMGR CM and/or Messaging ADC, plds.avaya.com, pldsxml.avaya.com downloads.dlavaya. com, downloads.avaya.com Avaya Aura Messaging 389 TCP/LDAP Yes N/A TCP- SSL/HTTPS HTTPS Yes N/A Unsecure LDAP connection to either Communication Messaging or Modular Messaging for administration of subscribers Alarm forwarding to Avaya Data Center. HTTPS or WebService calls from. Also used for SDM functionality. No Open HTTPS connection from to Avaya Aura Messaging for xml file downloads. SMGR SMGR CM and/or Messaging Session, CE TCP- SSL/LDAP TCP- SSL/JNDI Yes NA Secure LDAP connection to either Communication Messaging or Modular Messaging for administration of subscribers Yes NA JNDI name service running on Session & CE Avaya Matrix: Avaya Equinox Product Offerings 105 P a g e

106 Source SMGR SMGR SMGR SMGR Session, CE Session, CE Session, CE Session, CE Network / Application Protocol Optionally Enabled / Disabled? Default State 1299 TCP-SSL/RMI Yes NA RMI name service running on Session & CE TCP- SSL/JMX TCP- SSL/EJB3 TCP- SSL/JMX Yes NA JMX traffic for DRS from to element Yes NA EJB3 remote invoker running on Session & CE Yes NA JMX JRMP remote invoker running on Session & CE SMGR CM 5023 TCP/telnet Yes NA Unsecure OSSI Service port on Communication for administration of stations, etc. SMGR Session, TCP CE SSL/JBOSS Yes NA JBoss remote invoker running on Session & CE SMGR Session, TCP CE SSL/JBOSS Yes NA JBoss Messaging bisocket transport SMGR CM 5022 SMGR SMGR SMGR Session, CE B5800, Avaya Aura Conferencing Session, CE TCP- SSL/SSH TCP- SSL/JBOSS TCP- SSL/HTTPS Yes NA Secure OSSI Service port on Communication for administration of stations, etc. Yes NA Remoting connector running on Session & CE Yes NA TCP- SSL/RMI Yes NA HTTPS or WebService calls from RMI registry running on Session & CE. Also used for SDM functionality. SMGR Session, CE TCP- SSL/JMX Yes NA JMX traffic from SM element manager to Session & CE. Also used for SDM functionality. SMGR CM, CM Media Gateway CM, CM Media Gateway CM TN Boards Avaya Aura Conferencing SDM Remote Software Library SDM Remote Software Library SDM Remote Software Library TCP- SSL/HTTPS TCP/FTP TCP/FTP TCP- SSL/SCP Yes Yes Yes Yes NA NA NA NA HTTPS or WebService calls from File transfer between CM, CM Media Gateway and SMGR SDM Remote Software Library. Used for SDM functionality. File transfer between CM, CM Media Gateway and SMGR SDM Remote Software Library. Used for SDM functionality. File transfer between CM TN Boards and SMGR SDM Remote Software Library. Used for SDM functionality. Avaya Matrix: Avaya Equinox Product Offerings 106 P a g e

107 Source Network / Application Protocol Optionally Enabled / Disabled? Default State CM, CM Media Gateway Platform SDM Remote Software Library SDM Remote Software Library 22 TCP- SSL/SFTP Yes NA 80 TCP/HTTP No NA File transfer between CM, CM Media Gateway and SMGR SDM Remote Software Library. Used for SDM functionality. Used by Platform 6.x for upgrades. Used for SDM functionality. Avaya Matrix: Avaya Equinox Product Offerings 107 P a g e

108 Usage Diagram Avaya Matrix: Avaya Equinox Product Offerings 108 P a g e

109 18. Avaya Aura Communication (CM) Reference link : Communication 7.1 Matrix Table any Admin Admin Admin IP Phone IPSI Source CM / SCS / SRS SNMP NMS SNMP NMS Gateway/ CM / SCS / SRS / UPS (Non- Configurable NA (NA) IP Phone Admin / SCS / SRS Table 37 : Listen s for Communication CM NA (NA) CM 22 Network / Application Protocol Optionally Enabled / Disabled? Default State ICMP yes open TCP / SSH, SCP, SFTP yes open CM 23 TCP / Telnet yes closed CM 80 TCP / HTTP no open CM 81 TCP / HTTP no open CM 123 UDP / NTP Yes closed CM 123 UDP / NTP Yes closed CM 161 CLAN 161 CM 162 CM CLAN CM 443 UDP / SNMP Agent UDP / SNMP Agent UDP/ SNMP Trap 411 TCP / HTTPS TCP / HTTPS Yes Yes Yes No No closed closed closed open open ICMP messages: ping, etc. IP Protocol Number 1. OS administration interface over Secure Shell (SSH). Note 1, Note23 OS administration interfaces over Telnet. Note 23 Avaya web administration interface. Note 2, Note 23. HTTP IP Phone Firmware Download. Note 3. Network Time Protocol (NTP) Network Time Protocol (NTP) SNMP (server) Note 5, Note 23 SNMP (server) Note 23 SNMP traps (server) collection Note 6, Note 23 HTTPS IP Phone configuration file download Note 3 Avaya web administration interface (HTTPS) Note 23 Avaya Matrix: Avaya Equinox Product Offerings 109 P a g e

110 CLAN, IPSI, TN2602AP Source (Non- Configurable CM 514 Network / Application Protocol UDP/ SYSLOG Optionally Enabled / Disabled? Yes Default State closed CM 1.3 or older SRS 514 TCP / RSH yes closed H.248 Media Gateways H.323 Phone CM or CLAN CM 1039 TCP / Encrypted H.248 yes open TN Board Logging Legacy (CM1.3) Filesync Service Note 7 Proprietary encrypted H.248 over TCP. Note TCP / H.323 yes closed TLS encrypted H.323 signaling CM H.323 Phone CM CLAN H.323 Phone CM CLAN Third Party GK or GW Admin H.248 GW H.248 GW Admin CM CM or CLAN CM or CLAN CM or CLAN CM / SCS / SRS or CLAN CM / SCS / SRS or CLAN 1332 UDP / DES Encrypted Proprietary Note 9 Note UDP / H.225 Yes closed 1719 TCP/H.323 Yes closed 1720 TCP / H.323 Yes closed 1719, 1720, TCP / H.323 Yes closed 1720 TCP / H.323 Yes closed CM 2222 TCP / SSH Yes open CM or CLAN CM or CLAN CM 2944 TCP / H.248 Yes closed 2945 TCP / H.248 Yes open 5022 TCP / SSH yes open Arbiter. Note 9 Registration, Admission, and Status (RAS) for phones. Note 8 H.323 RAS for trunks Note 22 H.323 signaling Note 8, Note 10. H.323 IP trunk Signaling s admin via SAT H.323 IP trunk Signaling s admin via SAT High Priority SSH Note 12, Note 23 TLS encrypted H.248 Note 8, Note 13 Unencrypted H.248 Note 8, Note 13 SAT interface over SSH Note 14, Note 23 Avaya Matrix: Avaya Equinox Product Offerings 110 P a g e

111 Source Admin SIP Trunks SIP Trunks CM AEServices CM AMS CM CM / SCS / SRS CM / SCS / SRS CM / SCS / SRS G650 (Non- Configurable CM CM or CLAN CM or CLAN CM CM CM Network / Application Protocol Optionally Enabled / Disabled? Default State 5023 TCP / Telnet yes closed 5060 ( ) 5061 ( ) TCP / SIP yes closed TCP / TLS / SIPS TCP / TLS (optionally encrypted) TCP / ASAI (Q.931 ASN.1) TCP / Proprietary yes no yes No closed Open closed Open CM 9061 TCP/TLS/ ( ) SIPS Yes closed CM TCP / TLS no Closed CM /SCS/ SRS TCP / TLS no open CM SRS CM TCP / TLS no open TCP / TLS No open CM or CLAN TCP / H.245 No open SAT interface over Telnet Note 15, Note 23 SIP Note 8, Note 16, Note 22 SIPS Note 8, Note 17, Note 22 Dupmgr (SW duplication) Server 1 Note Error! Reference source not found. AEServices Note 20 DGB (debugging tool) SIP Note 22 Dupmgr (SW duplication) Server 2 Note Error! Reference source not found.. Proprietary. Optionally encrypted. Internal Filesync communication Note 21 Filesync over SSL Note 18 Filesync over SSL Note 19 H.245 Avaya Matrix: Avaya Equinox Product Offerings 111 P a g e

112 CM Source (Non- Configurable NA (NA) Table 38 : Talk-only s for Communication If a port is both listen and talk, it is covered by Table 37 rather than by Table 38. any NA (NA) Network / Application Protocol ICMP Optionally Enabled / Disabled? NA ICMP messages: ping, etc. IP Protocol Number 1. CM or CLAN DNS Server 53 UDP / DNS No DNS Requests and Responses CM Network Time Server (NTS) 123 UDP / NTP yes Network Time Protocol (client) Note 1 CM IPSI 123 UDP / NTP yes Network Time Protocol (client) Note 7 CM SNMP NMS 162 (0- UDP / SNMP Trap yes SNMP traps (client) for alarms or notable events Note 2, Note 11 CLAN SNMP NMS 162 UDP / SNMP Trap yes SNMP traps (client) for alarms or notable events Note 11 CM Rsyslog server. 514 UDP/ Syslog yes Remote system log storage SRS 514 CM (via CLAN/PE) Note 8 CM 1.3 or older H.323 Phone Note 7 TCP / RSH yes Legacy Filesync Service Note TCP / H.323 yes TTS Note 8 CM RADIUS Client RADIUS Server 1812, 1813 UDP/ RADIUS no RADIUS based login processing Note 9 CM IPSI 1956 TCP / Proprietary no IPSI Command Server Service CM IPSI 5010 TCP / Proprietary no IPSI / Server control channel CM IPSI 5011 TCP / Proprietary No IPSI / Server IPSI version channel CM IPSI 5012 TCP / Proprietary no IPSI / Server serial number channel Avaya Matrix: Avaya Equinox Product Offerings 112 P a g e

113 Source (Non- Configurable Network / Application Protocol Optionally Enabled / Disabled? CM SafeWord Client SafeWord Server 5030 TCP/ SafeWord yes SafeWord based login processing. Note 9 CM SIP Trunks 5060 (1 to TCP / SIP yes SIP Note 4, Note 5, Note 10 CM SIP Trunks 5061 (1 to TCP / TLS / SIPS yes SIP Note 4, Note 6, Note 10 CM SecurID Client SecurID Server 5500 UDP / SecurID yes SecurID based login processing. Note 9 CM or CLAN 5500 Audix / LX / MM / MN TCP / Proprietary? Audix Digital Networking CM AMS 9061 (1 to TCP/TLS/SIP S yes SIP Note 10 Avaya Matrix: Avaya Equinox Product Offerings 113 P a g e

114 Usage Diagram Avaya Matrix: Avaya Equinox Product Offerings 114 P a g e

115 19. Avaya Aura Presence Services (PS) Reference link : Presence Services Table Source AMM Presence Services Session Microsoft Front End Presence Services Table 39 : s for Presence Services Network / Application Protocol Optionally Enabled / Disabled? Default State 443 TCP/HTTPS No Open 5061 TCP/SIP No Open Presence Services 5063 TLS/SIP Yes Closed REST for AMM SIP Connection for SM SIP Connection for Microsoft RTC Federation Relay. opened when Microsoft Internal Federation is enabled. Endpoint Presence Services 5222 (C) TCP/XMPP No Open XMPP Client connection to PS XMPP Server Presence Services 5269 (C) TCP/XMPP No Open XMPP Federated Server-2-Server incoming connection Local Presence Services SDK Presence Services 7000 TCP/RMI No Open Gigaspaces Lookup Service Presence Services IBM Domino Server 80 TCP No Open Domino Collector Presence Services Microsoft Exchange Server 443 TCP/HTTPS No Open Exchange Collector Presence Services AES 450 TCP Yes Open AES Collector JTAPI connection to AES AES , AES Collector outbound connections to AES Presence Services TCP/TLS Yes Closed Presence Services Session 5061 TCP/SIP No Open SIP connection to SM Avaya Matrix: Avaya Equinox Product Offerings 115 P a g e

116 Source Presence Services XMPP Server Network / Application Protocol Optionally Enabled / Disabled? Default State 5269 (C) TCP/XMPP No Open XMPP Federated Server-2-Server outgoing connection Presence Services AMM 8453 TCP/HTTPS No Open REST API on AMM Presence Services Websphere 2809 TCP/JMX No Open Operational metrics collection Presence Services Presence Services 7000 TCP/RMI No Open Gigaspaces Lookup Service Avaya Matrix: Avaya Equinox Product Offerings 116 P a g e

117 Usage Diagram NOTE: Diagram is missing Microsoft RTC Federation (but it is listed in the table). Avaya Matrix: Avaya Equinox Product Offerings 117 P a g e