Technicians
Firewall service reference
Service hosts, protocols and ports for site network planning.
Before configuring rules
Use only the services required at the site. Confirm wildcard hosts, optional products and the source-port requirements with the network technician before applying rules; many entries repeat the service port in both columns.
Use Chrome or Chromium for NXT Wash. Firefox is not approved.
Service entries
| Category / product | Destination host | Direction | Protocol | Source port | Destination port |
|---|---|---|---|---|---|
| CC Processing / ePay/Tran/TranCloud | dms1.dsipscs.com | Outbound | TCP | 1024-5000 | 443 |
| CC Processing / ePay/Tran/TranCloud | dms2.dsipscs.com | Outbound | TCP | 1024-5000 | 443 |
| CC Processing / ePay/Tran/TranCloud | iptran1.dsipscs.com | Outbound | TCP | 1024-5000 | 443 |
| CC Processing / ePay/Tran/TranCloud | iptran2.dsipscs.com | Outbound | TCP | 1024-5000 | 443 |
| CC Processing / NETePay Hosted | prod1.netepayhosted.dcap.com | Outbound | TCP | 1024-5000 | 9000 |
| CC Processing / NETePay Hosted | prod1.netepayhosted.dcap.com | Outbound | TCP | 1024-5000 | 9100 |
| CC Processing / NETePay Hosted | prod2.netepayhosted.dcap.com | Outbound | TCP | 1024-5000 | 9000 |
| CC Processing / NETePay Hosted | prod2.netepayhosted.dcap.com | Outbound | TCP | 1024-5000 | 9100 |
| CC Processing / NETePay Hosted | webroute.dcap.com | Outbound | TCP | 1024-5000 | 443 |
| CC Processing / DC Direct | trancloud.dsipscs.com | Outbound | TCP | 1024-5000 | 5080 |
| CC Processing / DC Direct | rbaloader1.dsipscs.com | Outbound | TCP | 1024-5000 | 443 |
| CC Processing / DC Direct | rbaloader2.dsipscs.com | Outbound | TCP | 1024-5000 | 443 |
| CC Processing / DC Direct | lfc.dcap.com | Outbound | TCP | 1024-5000 | 443 |
| CC Processing / DC Direct | temterminalsnar02.icloud.ingenico.com | Outbound | TCP | 1024-5000 | 7002 |
| CC Processing / DC Direct | temterminalsnar01.preprod.icloud.ingenico.com | Outbound | TCP | 1024-5000 | 7002 |
| CC Processing / DC Direct | webroute.dcap.com | Outbound | TCP | 1024-5000 | 443 |
| CC Processing / PayLoader | payloaderapi.dcap.com | Outbound | TCP | 1024-5000 | 443 |
| NXT Wash Services / NXT Wash HTTPS | *.nxtwash.com | Outbound | TCP | 443 | 443 |
| NXT Wash Services / Production Kiosk/POS/Admin | api.nxtwash.com | Outbound | TCP | 300 | 300 |
| NXT Wash Services / Recharge Program | api.nxtwash.com | Outbound | TCP | 301 | 301 |
| NXT Wash Services / Wash/Gate Queue | api.nxtwash.com | Outbound | TCP | 303 | 303 |
| NXT Wash Services / Staging (Optional) | api.nxtwash.com | Outbound | TCP | 400 | 400 |
| NXT Wash Services / Staging (Optional) | api.nxtwash.com | Outbound | TCP | 401 | 401 |
| NXT Wash Services / Third Party APIs (Optional) | api.nxtwash.com | Outbound | TCP | 501 | 501 |
| NXT Wash Services / Mobile App (Optional) | api.nxtwash.com | Outbound | TCP | 302 | 302 |
| NXT Wash Services / UIRM Releases | *.s3.amazonaws.com | Outbound | TCP | 443 | 443 |
| NXT Wash Services / UIRM Releases | kiosk-release-latest.s3.amazonaws.com | Outbound | TCP | 443 | 443 |
| NXT Wash Services / UIRM Releases | tunnel-release-latest.s3.amazonaws.com | Outbound | TCP | 443 | 443 |
| NXT Wash Services / Kiosk Resources | fonts.gstatic.com | Outbound | TCP | 443 | 443 |
| NXT Wash Services / Kiosk Resources | nxtwashkiosk-images.s3.us-east-1.amazonaws.com | Outbound | TCP | 443 | 443 |
| Tireprints Services / Rekor Cloud | cloud.openalpr.com | Outbound | TCP | 443 | 443 |
| Tireprints Services / Rekor Licensing | license.openalpr.com | Outbound | TCP | 443 | 443 |
| Tireprints Services / Rekor Agent Connectivity | link.openalpr.com | Outbound | TCP | 80 | 80 |
| Tireprints Services / Rekor Updates/Health Checks | abilityupdate.openalpr.com | Outbound | TCP | 443 | 443 |
| Tireprints Services / Rekor Install | deb.openalpr.com | Outbound | TCP | 443 | 443 |
| Tireprints Services / Jetson Updates | ports.ubuntu.com | Outbound | TCP | 443 | 443 |
| Tireprints Services / Jetson Updates | download.docker.com | Outbound | TCP | 443 | 443 |
| Tireprints Services / Jetson Updates | repo.download.nvidia.com | Outbound | TCP | 443 | 443 |
| Tireprints Services / Tireprints API | tireprints.com | Outbound | TCP | 306 | 306 |
| Tireprints Services / Tireprints API | tireprints.com | Outbound | TCP | 200 | 200 |
| Tireprints Services / Tireprints Site | tireprints.com | Outbound | TCP | 80 | 80 |
| Tireprints Services / Tireprints Images | tireprints-vehicle-img.s3.amazonaws.com | Outbound | TCP | 443 | 443 |
| Installation Services / apt | security.ubuntu.com | Outbound | TCP | 443 | 443 |
| Installation Services / apt | archive.ubuntu.com | Outbound | TCP | 443 | 443 |
| Installation Services / apt | *.ubuntu.com | Outbound | TCP | 443 | 443 |
| Installation Services / apt | *.archive.ubuntu.com | Outbound | TCP | 443 | 443 |
| Installation Services / pip | pypi.org | Outbound | TCP | 443 | 443 |
| Installation Services / pip | *.pythonhosted.org | Outbound | TCP | 443 | 443 |
| Installation Services / npm | registry.npmjs.org | Outbound | TCP | 443 | 443 |
| Installation Services / Chrome | *.googleapis.com | Outbound | TCP | 443 | 443 |
| Installation Services / Chrome | googlechromelabs.github.io | Outbound | TCP | 443 | 443 |
| Installation Services / Chrome | storage.googleapis.com | Outbound | TCP | 443 | 443 |
| Installation Services / git | github.com | Outbound | TCP | 443 | 443 |
| Installation Services / git | api.github.com | Outbound | TCP | 443 | 443 |
| Installation Services / git | raw.githubusercontent.com | Outbound | TCP | 443 | 443 |
| Installation Services / git | objects.githubusercontent.com | Outbound | TCP | 443 | 443 |
| Installation Services / git | github-release.githubusercontent.com | Outbound | TCP | 443 | 443 |
| Network Hardware Services (if applicable) / Unifi Remote Management | *.ui.com | Outbound | TCP | 443 | 443 |
| Network Hardware Services (if applicable) / Unifi Remote Management | *.ui.com | Outbound | TCP | 8883 | 8883 |
| Network Hardware Services (if applicable) / Unifi Remote Management | *.ui.com | Outbound | UDP | 51820 | 51820 |
| Remote Support Services (if applicable) / Screenconnect | nxtwash.screenconnect.com | Outbound | TCP | 443 | 443 |
Still to confirm
ppmtechnology.pax.us needs confirmed direction, protocol and ports before a rule can be configured. Optional staging, API and mobile-app entries apply only where those services are used.