tbs electronics 2D IRON - Page 20

TBS Installation Manual – 2D IRON & 3D AIR
TBS 2D IRON 3D AIR Mounting and Installation Guideline • TBS-056-057 • Rev 09-2023 page 20 of 21
Table 4: Port Assignments for WebEdition installations (WE, Firmware 2.xx):
Machine
Port
Protocol
Comment
Inbound
Outbound
WE Server PC
Device channel
80
HTTP
default communication channel (SOAP
needs to be enabled in firewall settings,
if deep inspection mechanisms are used)
Yes
No
Secure device
channel
(1)
443
HTTPS
optional secure communication channel
(SOAP needs to be enabled, see above)
Yes
No
Biometric Client
Service PC
WE channel
(1)
80/443
HTTP/S
communication channel to WE server
and Device Control Center (DCC)
No
Yes
Enrollment API
8281,
8282, 8284
HTTP/S
communication channel between NT
service and JavaScript component
Yes
(2)
No
8283
MQTT
Enrollment PC
WE channel
(1)
80/443
HTTP/S
communication channel to WE server
and Device Control Center (DCC)
No
Yes
Series12 terminal
WebEdition
(1)
80/443
HTTP/S
communication channel to WE server
and Device Control Center (DCC)
No
Yes
DeviceConfig
Firmware 1 or 2
(1)
443
HTTPS
public web interface to configure
devices
Yes
No
DeviceConfig
Firmware 2.xx
18883
MQTT
additional web sockets based control
channel
Yes
No
DeviceControl
8200
HTTPS
public interface to remotely control
devices
Yes
No
RemoteControl
8220
HTTPS
internal interface to remotely control
devices, incl. enrollment
Yes
No
RemoteEnroll
(3)
8282
HTTPS
internal interface required for remote
enrollment
Yes
No
Terminal Updater
PC
UDP channel
47815
UDP
required for remote firmware update
Yes
No
TCP channel
47816
TCP
required for remote firmware update
Yes
No
(1) Can be customized during installation
(2) Ports are bound only to localhost
(3) Port is not mandatory in FW 2.xx since DCC channel is used for enrollment