Network Firewall and Web Security Whitelist for DTEN

OVERVIEW

This article lists the recommended network ports, IP addresses, and domains to safelist for DTEN hardware and software for operating within the Microsoft Teams Rooms (MTR) or Zoom Rooms experience and DTEN’s Orbit SaaS Management Portal:

• DTEN Windows-based products:
  • D7 Single Display Series (Gen 1 & Gen 2 55 in & 75 in)
  • D7 Dual Display Series (55 in & 75 in)
  • D7X Windows Edition (D7X-W) (55 in & 75 in)
  • D7X Dual
• DTEN Android-based products:
  • D7X Android Edition (D7X-A)
  • Bar
  • ON 55
  • ONboard 
  • ME
  • ME Pro
  • GO w/ MATE (WiFi & PoE versions)
  • MATE WiFi
  • MATE PoE

This article covers:

• Network ports, IP addresses, and domains needed to update DTEN firmware.
• Requirements for Orbit SaaS Management Portal
• Requirements for Microsoft Teams Rooms (MTR)
• Requirements for Zoom Rooms

Safelist IPs to update Firmware for DTEN Hardware

Product: DTEN Windows-based products, Android-based products, and Orbit SaaS Management Portal. 

To ensure successful Over-the-Air (OTA) firmware updates for DTEN products within your network infrastructure, we recommend safelisting the following:

TCP Ports: 

80, 443, 5222, 8000, 8001

UDP Ports: 

123, 3478-3479, 50000-65000

Domains: 

*.dten.com

android.pool.ntp.org

time.android.com

*.orbit.dten.com

54.210.93.97

54.83.177.62

52.216.64.176

Amazon Web Services (AWS):

AWS S3 IP is dynamic; please refer to the domain if possible.

• s3.amazonaws.com [52.216.95.61]
• s3.us-east-1.amazonaws.com [52.217.37.118]
• s3-external-1.amazonaws.com [52.216.185.225]
• s3.dualstack.us-east-1.amazonaws.com [2600:1fa0:80c8:a701:34d8:b92e::] 

Google:

Product: DTEN Android-based products

DTEN Android-based products will check the following domains for network connectivity:

• https://*.google.com
• https://*.google.cn
• https://*.googleapis.com

DTEN Android-based products will also check the following for the Captive Portal Detection:

• http://connectivitycheck.gstatic.com/

Google Public DNS

• Google Public DNS IPv4 addresses:
  • 8.8.8.8
  • 8.8.4.4
• Google Public DNS IPv6 addresses:
  • 2001:4860:4860::8888
  • 2001:4860:4860::8844

Windows Server Update Services (WSUS):

Product: D7 (GEN 1 & 2 Single & Dual Systems) and D7X Windows Edition (D7X-W & D7X Dual)

WSUS server must have outbound access to ports 80 and 443 on the following domains:

• http://windowsupdate.microsoft.com
• http://*.windowsupdate.microsoft.com
• https://*.windowsupdate.microsoft.com
• http://*.update.microsoft.com
• https://*.update.microsoft.com
• http://*.windowsupdate.com
• http://download.windowsupdate.com
• https://download.microsoft.com
• http://*.download.windowsupdate.com
• http://wustat.windows.com
• http://ntservicepack.microsoft.com
• http://go.microsoft.com
• http://dl.delivery.mp.microsoft.com
• https://dl.delivery.mp.microsoft.com
• http://*.delivery.mp.microsoft.com
• https://*.delivery.mp.microsoft.com

DTEN Windows-based hardware also uses the following dynamic or ephemeral port ranges for Windows Updates:

• TCP: 49152-65535

Refer to the Microsoft KB article on configuring WSUS for more information. [click here]

Microsoft Teams Rooms:

Product: D7X Android Edition (D7X-A), Bar, and Mate PoE

Microsoft recommends a wired 1 Gbps network connection for Microsoft Teams Rooms (MTR).

The following Microsoft Cloud services are used for management and configuration.

• Access to the following Microsoft Cloud services:
  • Microsoft 365
  • Microsoft Entra ID (Formerly Azure Active Directory)
  • Microsoft Exchange
  • Microsoft Intune
  • Microsoft Sharepoint/Onedrive
  • Microsoft Teams Admin Centre (TAC)
  • Microsoft Teams Pro Management Portal
• Access to a server that can provide an IP address using DHCP. Microsoft Teams Rooms can't be configured with a static IP address at the first unit startup.
• Access to HTTP ports 80 and 443.
• Microsoft 365 and Office 365 URLs and IP address ranges for Microsoft Teams.
• Microsoft Teams Rooms does not support proxy authentication, which may interfere with the room's operation. Before going into production, ensure that Microsoft Teams Rooms have been exempted from proxy authentication.

Quality of Service (QoS) for Microsoft Teams Rooms [click here]

Zoom & Zoom Rooms:

Please also ensure to safelist the following Zoom IP Addresses:  HERE

If you have additional questions or need to contact DTEN Support, please refer to this DTEN Knowledge Base article for more details:  HERE.