Firewall

An Ethernet connection with DHCP must be used to connect the Smart Hub (ACU) or Single Door Controller (SDC) to the Local Area Network (LAN). You also need to configure firewall settings to communicate with the Avigilon Alta system. Avigilon Alta uses the following outbound ports:

• TCP port 443

• UDP port 123

To support Wi-Fi unlocking from the mobile app, the ACU/SDC's inbound TCP port 443 must be available from within the LAN. Inbound port forwarding on the router, firewall, or NAT device is not required.

We do not allow HTTPS certificate rewriting or TSL/SSL inspection.

IP Address

We do not provide an IP range or FQDN list of Avigilon Alta hostnames for Basic and Premium licenses. Most hostnames resolve to dynamic IPs and the hostnames themselves change during provisioning and configuration update processes. If you wish to segregate traffic from your Avigilon controllers, you can enable a DMZ for the controllers to separate their traffic.

For Enterprise Licenses we offer a Static Cloud IP FAQ. This allows organizations with strict network firewall policies to easily open only a few IP addresses to allow Alta Access hardware to connect to the cloud.
This release includes a new version of the Openpath Admin app, which allows for the provisioning of ACU/SDC devices behind an already restricted firewall.