# Firewall Guide?

**URL:** <https://forum.inductiveautomation.com/t/firewall-guide/14694>\
**Category:** Ignition\
**Created:** [July 5, 2017, 7:51pm UTC](https://forum.inductiveautomation.com/t/firewall-guide/14694 "2017-07-05T19:51:13Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Caleb\_Bohon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/caleb_bohon/32/3293_2.png) [@Caleb\_Bohon](https://forum.inductiveautomation.com/u/Caleb_Bohon)\
**Post date:** [July 5, 2017, 7:51pm UTC](https://forum.inductiveautomation.com/t/firewall-guide/14694/1 "2017-07-05T19:51:13Z")

</div>

Does anyone have a guide to setting up a Firewall for an Ignition System?

It would be nice to have a central place (Knowledge Base article or other) that has

1. all default ports for Ignition features listed with
2. what functionality they are for, and
3. where to find the setting in Ignition to either confirm or change.

---

<div class="post-metadata">

**Author:** ![Caleb\_Bohon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/caleb_bohon/32/3293_2.png) [@Caleb\_Bohon](https://forum.inductiveautomation.com/u/Caleb_Bohon)\
**Post date:** [July 8, 2017, 1:01am UTC](https://forum.inductiveautomation.com/t/firewall-guide/14694/2 "2017-07-08T01:01:00Z")

</div>

I guess not. Here is one I made. Let me know if I missed anything.

[Ignition Firewall Settings.pdf](https://us1.discourse-cdn.com/inductiveautomation/original/2X/5/5e05799ae4908fae0b3729fe1fc39ad1b98fff67.pdf) (510.3 KB)

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [July 8, 2017, 1:35am UTC](https://forum.inductiveautomation.com/t/firewall-guide/14694/3 "2017-07-08T01:35:27Z")

</div>

Ignition’s native Ethernet/IP support only uses TCP port 44818. My Ethernet/IP Suite uses the full set. While you may need to open ports between different LAN segments within a plant, these ports (and similar) should **never** be opened to the outside world.

---

<div class="post-metadata">

**Author:** ![Caleb\_Bohon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/caleb_bohon/32/3293_2.png) [@Caleb\_Bohon](https://forum.inductiveautomation.com/u/Caleb_Bohon)\
**Post date:** [July 8, 2017, 3:32am UTC](https://forum.inductiveautomation.com/t/firewall-guide/14694/4 "2017-07-08T03:32:47Z")

</div>

True. The WAN I mention in the guide is for multi-site systems that have a VPN WAN. Those ports are open for site to site connections, but not to the WWW. I’ll have to clarify that.

---

<div class="post-metadata">

**Author:** ![andy.hill](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/andy.hill/32/18415_2.png) [@andy.hill](https://forum.inductiveautomation.com/u/andy.hill)\
**Post date:** [September 30, 2020, 2:54pm UTC](https://forum.inductiveautomation.com/t/firewall-guide/14694/5 "2020-09-30T14:54:07Z")

</div>

MQTT & MQTT Sparkplug\_B ports at 1883

---

<div class="post-metadata">

**Author:** ![Kevin.McClusky](https://avatars.discourse-cdn.com/v4/letter/k/47e85d/32.png) [@Kevin.McClusky](https://forum.inductiveautomation.com/u/Kevin.McClusky)\
**Post date:** [September 30, 2020, 7:48pm UTC](https://forum.inductiveautomation.com/t/firewall-guide/14694/6 "2020-09-30T19:48:49Z")

</div>

It's also worth noting that since the original post in 2017, we have released a port reference as part of our standard documentation. You can find it in the user manual.

Ignition 8.3: [Gateway Port Reference | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.3/appendix/reference-pages/gateway-port-reference)  
Ignition 8.1: [Gateway Port Reference | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/appendix/reference-pages/gateway-port-reference)