# Client and server separated by firewall

**URL:** <https://forum.inductiveautomation.com/t/client-and-server-separated-by-firewall/9082>\
**Category:** Ignition\
**Created:** [September 19, 2014, 5:17pm UTC](https://forum.inductiveautomation.com/t/client-and-server-separated-by-firewall/9082 "2014-09-19T17:17:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ssorrell](https://avatars.discourse-cdn.com/v4/letter/s/4bbf92/32.png) [@ssorrell](https://forum.inductiveautomation.com/u/ssorrell)\
**Post date:** [September 19, 2014, 5:17pm UTC](https://forum.inductiveautomation.com/t/client-and-server-separated-by-firewall/9082/1 "2014-09-19T17:17:04Z")

</div>

I am on a project in which the client and the gateway have a firewall between them. I can’t seem to find the ports that the client uses to speak with the gateway. Is this documented somewhere?

---

<div class="post-metadata">

**Author:** ![diat150](https://avatars.discourse-cdn.com/v4/letter/d/a587f6/32.png) [@diat150](https://forum.inductiveautomation.com/u/diat150)\
**Post date:** [September 19, 2014, 5:19pm UTC](https://forum.inductiveautomation.com/t/client-and-server-separated-by-firewall/9082/2 "2014-09-19T17:19:35Z")

</div>

you can find it on the gateway control utility

if you are using ssl you will need to open both the standard port and the ssl port. Or at least that was true in 7.5.

default ports are 8088 for standard and 443 for ssl.

---

<div class="post-metadata">

**Author:** ![ssorrell](https://avatars.discourse-cdn.com/v4/letter/s/4bbf92/32.png) [@ssorrell](https://forum.inductiveautomation.com/u/ssorrell)\
**Post date:** [September 19, 2014, 5:37pm UTC](https://forum.inductiveautomation.com/t/client-and-server-separated-by-firewall/9082/3 "2014-09-19T17:37:45Z")

</div>

So, when the client wants to get OPC tags, it goes through the 8443 (or whatever ignition is using for SSL), and if it wants to get an image from the image repository, same deal? There’s no RMI or similar technologies involved, it’s all HTTP(S) though standard (i.e. configured but commonly used for the gateway website) ports?

---

<div class="post-metadata">

**Author:** ![diat150](https://avatars.discourse-cdn.com/v4/letter/d/a587f6/32.png) [@diat150](https://forum.inductiveautomation.com/u/diat150)\
**Post date:** [September 19, 2014, 5:39pm UTC](https://forum.inductiveautomation.com/t/client-and-server-separated-by-firewall/9082/4 "2014-09-19T17:39:44Z")

</div>

yes.