# Configuring Firewall for SCADA Ignition

**URL:** <https://forum.inductiveautomation.com/t/configuring-firewall-for-scada-ignition/36019>\
**Category:** Ignition\
**Created:** [June 25, 2020, 8:54am UTC](https://forum.inductiveautomation.com/t/configuring-firewall-for-scada-ignition/36019 "2020-06-25T08:54:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![eccornelsen](https://avatars.discourse-cdn.com/v4/letter/e/43a26b/32.png) [@eccornelsen](https://forum.inductiveautomation.com/u/eccornelsen)\
**Post date:** [June 25, 2020, 8:54am UTC](https://forum.inductiveautomation.com/t/configuring-firewall-for-scada-ignition/36019/1 "2020-06-25T08:54:41Z")

</div>

Hi there,

What are the typical TCP/UDP ports that have to be configured as exceptions in the firewall rules for a SCADA Ignition application?

Thanks

---

<div class="post-metadata">

**Author:** ![Sanderd17](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sanderd17/32/8735_2.png) [@Sanderd17](https://forum.inductiveautomation.com/u/Sanderd17)\
**Post date:** [June 25, 2020, 9:34am UTC](https://forum.inductiveautomation.com/t/configuring-firewall-for-scada-ignition/36019/2 "2020-06-25T09:34:31Z")

</div>

This is documented here: [https://docs.inductiveautomation.com/display/DOC80/Gateway+Port+Reference](https://docs.inductiveautomation.com/display/DOC80/Gateway+Port+Reference)

Port 8088 is the main port needed (or 8043 if you use SSL).

The other ports depend on your configuration and used protocols (PLC and database connections).

---

<div class="post-metadata">

**Author:** ![eccornelsen](https://avatars.discourse-cdn.com/v4/letter/e/43a26b/32.png) [@eccornelsen](https://forum.inductiveautomation.com/u/eccornelsen)\
**Post date:** [June 25, 2020, 11:02am UTC](https://forum.inductiveautomation.com/t/configuring-firewall-for-scada-ignition/36019/3 "2020-06-25T11:02:51Z")

</div>

Thanks @Sanderd17, apart from the ports used for the communication with the Ignition gateway and the ports used for the database and the PLCs are there other “hidden” ports/services that are used?

---

<div class="post-metadata">

**Author:** ![Sanderd17](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sanderd17/32/8735_2.png) [@Sanderd17](https://forum.inductiveautomation.com/u/Sanderd17)\
**Post date:** [June 25, 2020, 11:14am UTC](https://forum.inductiveautomation.com/t/configuring-firewall-for-scada-ignition/36019/4 "2020-06-25T11:14:26Z")

</div>

I’m no sysadmin, but for the cases where clients wanted to view Ignition clients outside their protected VLAN, the sysadmins just had to make sure port 8088 was open.