DW Spectrum - FQDN or Allowlist for DW Cloud Access

FQDN or Allowlist for DW Spectrum Cloud Access

-----------------------------------

Affected Roles: Owner, Administrator

Related Digital Watchdog VMS Apps: DW Spectrum® IPVMS

Last Edit: August 23, 2024

-----------------------------------

Port Configuration

Video management systems (VMS) will generate Internet traffic if a system is provided Internet access. Because of this, some port management may be needed to allow access through network security for systems to communicate with each other, especially if a DW Spectrum System is comprised of merged servers between different locations.

DW Cloud™ is part of a Peer-to-Peer (P2P) network that allows DW Spectrum® users to easily connect with individual servers and merged systems but there may be instances where an enterprise Firewall prevents communication.

When a user attempts to connect with a camera remotely, the connection will first be routed to the DW Cloud server, which will then direct the connection to the DW Spectrum Server using the already established socket that was previously initiated. Authentication and connection will then be established between the connecting DW Spectrum Client and DW Spectrum Server, providing access to the camera.

The presence of a firewall or SonicWall can interfere with this P2P communication. This is why some network configuration may be required when using an Internet connection from behind a security wall.

This article will outline the relative port information required to allow access between DW Cloud and DW Spectrum systems.

**NOTE: To check DW Cloud status, visit https://www.digital-watchdog.com/cloudstatus.

FQDN/Allowlisting – Firewall/SonicWall Pass List

To allow a remote connection through a firewall or SonicWall with DW Cloud or a DW Spectrum Client interaction, the routing and Internet security settings of your network may require you to use a specified address list.

When configuring a firewall or SonicWall, FQDN (Fully Qualified Domain Name) format should be used in order to successfully allowlist the specific services of DW Cloud and DW Spectrum, as some of the endpoints do not inherently resolve to static IP addresses.

**NOTE: Please note that it is important to add all the FQDNs that are listed below to your firewall pass list, not just the ones that are specific to your region. To learn more about how the DW Cloud connection service work, you may refer to the article DW Cloud Overview.

For DW Cloud Portal and Cloud Database (TCP Ports: 80, 443)

Required to connect with or to disconnect systems from DW Cloud and to maintain connections.

https://dwspectrum.digital-watchdog.com

15.197.226.136

3.33.243.34

13.248.187.145

76.223.54.46

For Relay – (TCP Ports: 80, 443, 3345; UDP Port: 3345)

Main

relay.vmsproxy.com

Americas

New York, NY 2

relay-ny2.vmsproxy.com (89.187.177.166)



New York, NY 3

dp-ny-3.vmsproxy.com (138.199.41.85)



New York, NY 4

dp-ny-4.vmsproxy.com (156.146.58.154)



Los Angeles, CA 1

relay-la.vmsproxy.com (185.152.67.150)



Los Angeles, CA 2

Dp-la-2.vmsproxy.com (84.17.45.136)



Chicago, IL

relay-chi.vmsproxy.com (89.187.181.221)



Miami, FL

relay-mia.vmsproxy.com (212.102.60.89)



Dallas, TX

relay-dp-dal-1.vmsproxy.com (89.187.175.87)



Ashburn, VA

relay-dp-ash-1.vmsproxy.com (37.19.207.90)



Seattle, WA

relay-dp-sea-1.vmsproxy.com (138.199.12.70)

Europe

Frankfurt 1, Germany

relay-fr.vmsproxy.com (195.181.174.35)



Frankfurt 2, Germany

relay-dp-fr-2.vmsproxy.com (109.61.80.226)



Amsterdam 1, Netherlands

relay-dp-ams-1.vmsproxy.com (89.187.174.241)

Stockholm, Sweden

relay-dp-sto-1.vmsproxy.com (121.127.46.174)

Oceania

Sydney, Australia 1

vultr-syd-1.vmsproxy.com (149.28.175.197)



Sydney, Australia 2

vultr-syd-2.vmsproxy.com (45.77.236.199)



Sydney, Australia 3

vultr-syd-3.vmsproxy.com (45.63.31.226)



Sydney, Australia 4

vultr-syd-4.vmsproxy.com (45.77.51.96)



Melbourne, Australia 1    

vultr-mel-1.vmsproxy.com (67.219.104.251)



Melbourne, Australia 2    

vultr-mel-2.vmsproxy.com (67.219.103.112)



Melbourne, Australia 3    

vultr-mel-3.vmsproxy.com (67.219.104.173)



Melbourne, Australia 4 

vultr-mel-4.vmsproxy.com (67.219.97.147)

China

Used for China users only, excluding Hong Kong.

cn-north-1.relay.vmsproxy.cn (52.81.101.172)

APAC Region

Singapore 1

relay-dp-sgp-1.vmsproxy.com (64.176.84.75)



Singapore 2

vultr-sgp-1.vmsproxy.com (139.180.209.49)



Singapore 3

vultr-sgp-2.vmsproxy.com (139.180.152.47)



Singapore 4

vultr-sgp-3.vmsproxy.com (139.180.216.14)



Singapore 5

vultr-sgp-4.vmsproxy.com (45.77.168.39)

For Connection Mediator – (TCP Ports: 80, 443, 3345; UDP Port: 3345)

Americas

us-east-1.mediator.vmsproxy.com (52.7.195.88)



us-east-2.mediator.vmsproxy.com (3.138.130.201)



us-west-1.mediator.vmsproxy.com (54.153.53.233)

relay-dp-sto-1.vmsproxy.com (121.127.46.174)

APAC

ap-southeast-2.mediator.vmsproxy.com (3.25.68.173)

Europe

eu-central-1.mediator.vmsproxy.com (52.58.51.230)

For License Activation/Deactivation (TCP Port: 80, 443)

Required to activate and manage licenses online.

licensing.vmsproxy.com

For Update Notifications (TCP Ports: 80, 443)

updates.vmsproxy.com

beta.vmsproxy.com

For Anonymous Reporting (TCP Ports: 80, 443)

Required to send anonymous usage statistics.

stats.vmsproxy.com

stats2.vmsproxy.com

crashes.vmsproxy.com

For Fetching Public IP (TCP Port: 80, 443)

Required to allow Servers to fetch a public IP for use in directing System traffic.

tools.vmsproxy.com

tools-eu.vmsproxy.com

For Speed Testing (TCP Port: 80)

speedtest.vmsproxy.com

Refers to the following IPs, depending on the location of the client instance:

18.196.46.87

54.193.97.109

54.255.218.20

13.211.129.121

For Time Synchronization (TCP Port: 37, 443)

Required to synchronize Server times with DW time servers.

time.rfc868server.com

us-west.rfc868server.com

frankfurt.rfc868server.com

singapore.rfc868server.com

Refers to the following IPs, depending on the location of the client instance:

54.67.89.126

35.157.161.236

54.254.212.230

Additional Resources

Passlist Tool

The passlist tool is useful for determining if server and/or client systems are able to communicate with the cloud services. These tools only indicate baseline communications from the machine as a whole, and does not account for other potential restrictions (application restrictions, certificate issues, etc.) If you are still having issues with connectivity, consider reaching out to your network administrator.

Open: Indicates general communication has been established to the service.
Closed: Indicates general communication has failed to establish (indicates firewall block or service is currently unavailable).

Windows

Simply download the file and run, it will begin the test automatically!

Linux

Download the passlist tool, and move the file to your desktop.
Press to open Terminal
Run the command
```
sudo su
```
and enter the password (default Dw5pectrum)
Run the command
```
cd Desktop
```
to change the active directory to your Desktop

Run the command

python3 cloud_passlist_checkup_tool_<version>.py

or

python cloud_passlist_checkup_tool_<version>.py

Most systems will work with "python3", however if it fails you can try "python".

The tool will automatically start.

For More Information or Technical Support

DW Technical Support: 866.446.3595 (option 4)

https://www.digital-watchdog.com/contact-tech-support/

______________________________________________________________________________

DW Sales: 866.446.3595 [email protected] www.digital-watchdog.com