FQDN or Allowlist for DW Spectrum Cloud Access

-----------------------------------

Affected Roles: Owner, Administrator

Related Digital Watchdog VMS Apps: DW Spectrum® IPVMS

Last Edit: December 4, 2024

-----------------------------------

Port Configuration

Video management systems (VMS) will generate Internet traffic if a system is provided Internet access.  Because of this, some port management may be needed to allow access through network security for systems to communicate with each other, especially if a DW Spectrum System is comprised of merged servers between different locations.

DW Cloud™ is part of a Peer-to-Peer (P2P) network that allows DW Spectrum® users to easily connect with individual servers and merged systems but there may be instances where an enterprise Firewall prevents communication.

When a user attempts to connect with a camera remotely, the connection will first be routed to the DW Cloud server, which will then direct the connection to the DW Spectrum Server using the already established socket that was previously initiated.  Authentication and connection will then be established between the connecting DW Spectrum Client and DW Spectrum Server, providing access to the camera.

The presence of a firewall or SonicWall can interfere with this P2P communication.  This is why some network configuration may be required when using an Internet connection from behind a security wall.

This article will outline the relative port information required to allow access between DW Cloud and DW Spectrum systems.

**NOTE:  To check DW Cloud status, visit https://www.digital-watchdog.com/cloudstatus.

FQDN/Allowlisting – Firewall/SonicWall Pass List

To allow a remote connection through a firewall or SonicWall with DW Cloud or a DW Spectrum Client interaction, the routing and Internet security settings of your network may require you to use a specified address list.

When configuring a firewall or SonicWall, FQDN (Fully Qualified Domain Name) format should be used in order to successfully allowlist the specific services of DW Cloud and DW Spectrum, as some of the endpoints do not inherently resolve to static IP addresses.

**NOTE: Please note that it is important to add all the FQDNs that are listed below to your firewall pass list, not just the ones that are specific to your region. To learn more about how the DW Cloud connection service work, you may refer to the article DW Cloud Overview.

For DW Cloud Portal and Cloud Database (TCP Ports: 80, 443)

Required to connect with or to disconnect systems from DW Cloud and to maintain connections.

https://dwspectrum.digital-watchdog.com

15.197.226.136

3.33.243.34

13.248.187.145

76.223.54.46

For Relay – (TCP Ports: 80, 443, 3345; UDP Port: 3345)

Main

Americas

Ashburn 1, VA 
relay-us-abn-1-prod-dp.vmsproxy.com (37.19.207.250)

Chicago 1, IL 
relay-us-chi-1-prod-dp.vmsproxy.com (143.244.60.94)

Europe

Prague 1, Czech 
relay-cz-prg-1-prod-dp.vmsproxy.com (143.244.58.97)

Frankfurt 1, Germany 
relay-de-fra-1-prod-dp.vmsproxy.com (87.249.129.114)

Amsterdam 1, Netherlands
relay-nl-ams-1-prod-dp.vmsproxy.com (79.127.227.187)

Stockholm 1, Sweden 
relay-se-sto-1-prod-dp.vmsproxy.com (79.127.249.120)

Oceania

Sydney, Australia 1

relay-au-syd-1-prod-dp.vmsproxy.com (95.173.193.212)


Sydney, Australia 2

relay-au-syd-2-prod-dp.vmsproxy.com (95.173.193.213)

China

Used for China users only, excluding Hong Kong.

cn-north-1.relay.vmsproxy.cn (52.81.101.172)

APAC Region

Singapore 1

relay-sg-sin-1-prod-dp.vmsproxy.com (169.150.243.58)


Singapore 2

relay-sg-sin-2-prod-dp.vmsproxy.com (169.150.207.238)

For Connection Mediator – (TCP Ports: 80, 443, 3345; UDP Port: 3345)

Americas

us-east-1.mediator.vmsproxy.com (52.7.195.88)


us-east-2.mediator.vmsproxy.com (3.138.130.201)


us-west-1.mediator.vmsproxy.com (54.193.142.173)

APAC

ap-southeast-2.mediator.vmsproxy.com (54.153.133.243)

Europe

eu-central-1.mediator.vmsproxy.com (3.79.106.55)

For License Activation/Deactivation (TCP Port: 80, 443)

Required to activate and manage licenses online.

licensing.vmsproxy.com

For Update Notifications (TCP Ports: 80, 443)

updates.vmsproxy.com

beta.vmsproxy.com

For Anonymous Reporting (TCP Ports: 80, 443)

Required to send anonymous usage statistics.

stats.vmsproxy.com


stats2.vmsproxy.com


crashes.vmsproxy.com

For Fetching Public IP (TCP Port: 80, 443)

Required to allow Servers to fetch a public IP for use in directing System traffic.

tools.vmsproxy.com

tools-eu.vmsproxy.com

For Speed Testing (TCP Port: 80)

speedtest.vmsproxy.com

Refers to the following IPs, depending on the location of the client instance:

18.196.46.87

54.193.97.109

54.255.218.20

13.211.129.121

For Time Synchronization (TCP Port: 37, 443)

Required to synchronize Server times with DW time servers.

time.rfc868server.com

us-west.rfc868server.com

frankfurt.rfc868server.com

singapore.rfc868server.com

Refers to the following IPs, depending on the location of the client instance:

54.67.89.126

35.157.161.236

54.254.212.230

For DW Ai Server Licenses and Configuration Tool (TCP Port: 443)

Required for DW Blackjack Ai Servers using Ai Version 2.9 or older.

**NOTE: DW Ai Server version should be 2.10r3 (or newer) and Configuration Tool is 2.10.2 (or newer).

https://ivalicense.mydw.cloud

Additional Resources

• Cloud_passlist_checkup_tool_0.0.4.14.1.exe
• Cloud_passlist_checkup_tool_0.0.4.14.1.py
• Firewall Passlist.csv

For More Information or Technical Support

DW Technical Support:  866.446.3595 (option 4)

https://www.digital-watchdog.com/contact-tech-support/

______________________________________________________________________________

DW Sales:  866.446.3595                   [email protected]        www.digital-watchdog.com