Ports used

The charts below list all possible network communication ports used when ESET Remote Administrator and its components are installed in your infrastructure. Other communication occurs via the native operating system processes (for example NetBIOS over TCP/IP).

ERA Server:

Protocol

Port

Usage

Descriptions

TCP

2222

ERA Server listening

Communication between ERA Agents and ERA Server

TCP

2223

ERA Server listening

Communication between ERA Web Console and ERA Server, used for Assisted installation

ERA Web Console running on the Apache Tomcat web server:

Protocol

Port

Usage

Descriptions

TCP

443

Listening

HTTP SSL Web Console call

ERA Proxy:

Protocol

Port

Usage

Descriptions

TCP

2222

Listening

Communication between ERA Agents and ERA Proxy

Apache HTTP Proxy:

Protocol

Port

Usage

Descriptions

TCP

3128

Listening

HTTP Proxy (update caching)

ERA Agent:

Protocol

Port

Usage

Descriptions

UDP

1237

Listening

Wake-up call for IPv4

UDP

1238

Listening

Wake-up call for IPv6

Mobile Device Connector:

Protocol

Port

Usage

Descriptions

TCP

9977

 

Internal communication between Mobile Device Connector and ERA Agent

TCP

9978

 

Internal communication between Mobile Device Connector and ERA Agent

TCP

9980

Listening

Mobile device enrollment

TCP

9981

Listening

Mobile device communication

TCP

5223

 

External communication with Apple Push Notification services

TCP

2195

 

Sending notifications to Apple Push Notification services

TCP

2196

 

Apple Push Notification feedback service

TCP

443

 

Fallback on Wi-Fi only, when devices can't reach APNs on port 5223.

Android Device connection to GCM server.

Connection to the ESET licensing portal.

TCP

5228, 5229, 5230

 

Sending notifications to Google Cloud Messaging

ERA Agent - used for remote deployment of ERA Agent to a target computer with Windows OS:

Protocol

Port

Usage

Descriptions

TCP

139

Target port from the point of view of ERA Server

Using the share ADMIN$

TCP

445

Target port from the point of view of ERA Server

Direct access to shared resources using TCP/IP during remote installation (an alternative to TCP 139)

UDP

137

Target port from the point of view of ERA Server

Name resolution during remote install

UDP

138

Target port from the point of view of ERA Server

Browse during remote install

The pre-defined ports 2222, 2223 can be changed if they are already in use by other applications.

validation-status-icon-infoNOTE: For the proper function of ESET Remote Administrator, none of the ports above can be used by other applications.

validation-status-icon-infoNOTE: Make sure to configure any firewall(s) within your network to allow communication via the ports listed above.