Ports and Services used by Email Security
Description
Resolution
In addition to SMTP, SonicWall Email Security uses several other standard protocols for management, communication and updates. Depending on network configuration and placement of Email Security and other required services, some or all of these protocols will require corresponding ports to be opened at your gateway Router/Firewall.
Required Ports
The following tables detail the standard services used by Email Security in either All-In-One or Split Mode (Control Center & Remote Analyzer(s)). Due to various configurations and the ability to change the ports utilized, this information is provided as a guideline only, and may need to be customized dependent on how and where Email Security is deployed.
All-In-One
| Service | Port | Origin | Destination | Notes |
| SMTP | 25 | Any/WAN | EMAIL SECURITY | Inbound Path |
| EMAIL SECURITY | Mail Server | Inbound Path | ||
| Mail Server | EMAIL SECURITY | Outbound Path | ||
| EMAIL SECURITY | Any/WAN | Outbound Path | ||
| DNS | 53 | EMAIL SECURITY | DNS Server | MX Routing |
| LDAP | 389 | EMAIL SECURITY | LDAP/AD Server | Users and Groups |
| HTTP | 80 | Any/LAN | EMAIL SECURITY | Web Access / Administration |
| EMAIL SECURITY | http://feature.mailfrontier.net http://config.mailfrontier.net https://av.es.global.sonicwall.com http://av-updates.mailfrontier.net http://kas-av-updates.mailfrontier.net http://eg-update.es.global.sonicwall.com | Updates |
Split Mode:
| Service | Port | Origin | Destination | Notes |
|---|---|---|---|---|
| SMTP | 25 | Any/WAN | RA | Inbound Path |
| RA | Mail Server | Inbound Path | ||
| Mail Server | RA | Outbound Path | ||
| RA | Any/WAN | Outbound Path | ||
| DNS | 53 | CC/RA | DNS Server | MX Routing/Host Resolution |
| LDAP | 389 | CC | LDAP/AD Server | Users and Groups |
| HTTP | 80 | Any/LAN | CC/RA | Web Access / Administration |
| CC/RA | http://feature.mailfrontier.net http://config.mailfrontier.net https://av.es.global.sonicwall.com http://av-updates.mailfrontier.net http://kas-av-updates.mailfrontier.net http://eg-update.es.global.sonicwall.com | Updates | ||
| Replication | 2599 | RA | CC | Junk/Log Replication |
| 80 | CC | RA | Configuration Replication | |
|
| 51212 | CC/RA | RA/CC | Junk/Log & Configuration Replication on Replicationv2 |
Additional Services:
| Protocol | Port | Origin | Destination | Notes |
| HTTPS | 443 | Any/LAN | EMAIL SECURITY | Secure Web Access |
| LDAP | 3268 | EMAIL SECURITY | AD Server | Global Catalog |
Optional Services:
| Protocol | Port | Origin | Destination | Notes |
| LDAPS | 636 | EMAIL SECURITY | AD Server | Secure LDAP Query |
| CIFS | 445 | EMAIL SECURITY | CIFS Share | Connectivity to CIFS Share |
| FTP | 21 | EMAIL SECURITY | FTP Server | Scheduled Backups for Settings |