Firewall and Web-Filter Rules

Size: px

Start display at page:

Download "Firewall and Web-Filter Rules"

Briana Black
6 years ago
Views:

1 Firewall and Web-Filter Rules February 2015

2 This document is intended for restricted use only. Infinite Campus asserts that this document contains proprietary information that would give our competitors undue advantage should they come into possession of any part or all of it. As such, this document cannot be publicly disclosed unless so ordered by a court of competent jurisdiction Infinite Campus, Inc. All rights reserved. INFINITE CAMPUS and Transforming K12 Education are registered trademarks of Infinite Campus, Inc. The INFINITE CAMPUS logo is a trademark of Infinite Campus, Inc. This publication, or any part thereof, may not be reproduced or transmitted in any form or any means, electronic or mechanical, including photocopying, recording, storage in an information retrieval system, or otherwise, by anyone other than Infinite Campus, Inc. without written permission of Infinite Campus, Inc., th Avenue NE, Blaine, MN 55449, tel. (651) , info@infinitecampus.com.

3 Firewall and Web-Filter Rules This document contains important information relating to the required firewall and web filter rules that must be put in place in order for the Infinite Campus application, and the Infinite Campus servers to operate properly. Based on your Hosting Model below, please completely review the following information. All customers regardless of their Hosting Model: Infinite Campus Application Subnets: The following subnets are used by Infinite Campus for Campus Application traffic: / / /21 ( ) Please configure your firewall to allow the following traffic: Inbound From Infinite Campus for all three subnets above on all ports. Outbound To Infinite Campus for all three subnets above on all ports. Please note: **The above listed information is the preferred method of configuration as this will cover all the ports/rules that Campus needs. Please read further in this document for a breakdown of firewall IP/Port requirements by your Hosting Model.** Customers utilizing the Campus Cloud and/or Campus Cloud Choice Hosting Model: Essentially, there are no additional firewall rules are required to make the Infinite Campus application operate. All firewall configuration is completed within the Infinite Campus network at our datacenters. Customers utilizing the In-District Hosting Model (On-Site Servers): In addition to the section above for all districts in regards to the Infinite Campus subnets, you will also be required to make the following adjustment(s) to your firewall adding these two additional subnets. The following subnets are used by Infinite Campus for Server Automation tools (specifically remote backups): / /24 Please configure your firewall to allow the following traffic: Inbound From Infinite Campus for the above two subnets on port 4329/TCP. Outbound To Infinite Campus for the above two subnets on port 4329/TCP. Below you will find a breakdown of all ports used by the Infinite Campus application and supporting software. Use this information to open specific ports on your firewall. 3

4 Infinite Campus Application/Parent Portal: Single application server or combination server (app/db) environment (no load balancer): Ports 80/TCP and 443/TCP inbound from any host to the Infinite Campus application DNS/IP both internal and external. If applicable, there must be unrestricted communication between the application server and the database server. Multiple application server environment (load balancing in place): Ports 80/TCP and 443/TCP inbound from any host to your load balancer Virtual IP both internal and external. There must be unrestricted communication between the application server(s) and the database server(s). Port 445 for SMB communication to the Campus Document Store. (The Campus Document Store is usually located on an application server, but depending on configuration this may vary.) Infinite Campus Additional Features, Add-Ons, & Premium Products: Infinite Campus Mobile Portal app - Port 5671/TCP. This needs to be opened outbound from the application server(s) to the Infinite Campus subnets listed above. Campus Messenger ( only) This will vary depending on your setup. Speak to a Support Representative for more information. Campus Messenger w/ Voice Ports 80/TCP, 443/TCP & 8443/TCP. These need to be opened inbound & outbound from the application server(s) to the following subnet(s): a /24 ( & b /28 ( & c. Campus Online Payments Port 443/TCP. This needs to be opened inbound & outbound from the application server(s) to the following IP addresses: i ( ii ( iii. Campus Food Service/Point of Sale Traffic from the application travels via to the Campus application server(s) so no specific configuration here should be necessary. Infinite Campus Systems Monitoring/Utilities/Management: The following are used by Infinite Campus for performing system health checks, remote backups, auto-updates, anti-virus updates, etc. Listed below is a breakdown of traffic to/from Infinite Campus or other websites necessary for proper use of the Infinite Campus system: Infinite Campus Agent this tool is on each Infinite Campus server and performs multiple tasks that report back for review/analysis: a. hosting.infinitecampus.net Ports 80, 443, and 4329 both inbound and outbound. This is for performing remote backups, auto-updates, etc. b. updates.infinitecampus.net Ports 80, 44 This is the site used for pulling updates/utilities from. c. Anti-Virus Software (AVG) this is used to monitor and scan for viruses on the Infinite Campus server(s): i. avgadmin.infinitecampus.com Port 4329 both inbound and outbound. ii. avgmonitor.infinitecampus.com Port 4329 both inbound and outbound. iii. update.avg.com & backup.avg.cz These are to allow AVG (anti-virus software) to download and install the latest updates 4

5 iv. System Health Monitoring Hyperic is used to report disk space issues, hardware issues, etc. back to Infinite Campus for analysis and action: a. hyperic.infinitecampus.com v. Windows Server Update Services This allows Infinite Campus to manage the distribution of updates for Microsoft products on the Infinite Campus servers: wsus.infinitecampus.com Port 4329 both inbound and outbound. wsusinfinitecampus.com Port 4329 both inbound and outbound. vi. Microsoft Remote Desktop Port This is used by Infinite Campus Hosting to perform Remote Desktop operations on the Infinite Campus server(s). vii. HP Integrated Lights Out (ilo) Utility This is used by Infinite Campus Hosting to perform remote console tasks on the Infinite Campus server(s) should we be unable to access the server via Remote Desktop. The following ports must be opened inbound & outbound from the IP assigned to the ilo card: Secure Shell (SSH) Port 22/TCP Remote Console/Telnet Port 23/TCP Web Server Non-SSL Port 80/TCP (required for some functionality to work.) 4. Web Server SSL Port 443/TCP 5. IMPI over LAN Port 623/TCP 6. Terminal Services Port 3389/TCP 7. Shared Remote Console Port 9300/TCP 8. Virtual Media Port 17988/TCP 9. Shared Remote Console Port 17990/TCP Web Filtering: If your district uses any web filtering software please make sure you update your rules to allow all Infinite Campus traffic. Many times a district will have their firewall open as requested, but the application does not work because of web filter rules put in place. 5

Letter Designer July 2013

Letter Designer July 2013 This document is intended for restricted use only. Infinite Campus asserts that this document contains proprietary information that would give our competitors undue advantage