TCP and UDP ports used by each component of PowerChute.
Issue:
What TCP and UDP ports are used by each component of PowerChute
Product Line:
PowerChute Business Edition
PowerChute Serial Shutdown
For information concerning PowerChute Network Shutdown, see Schneider Electric FAQ . What ports are utilized by PowerChute Network Shutdown and how are they secured?
Environment:
All supported OS
Cause:
Informational
Solution:
TCP
6547 – Agent Web UI (PowerChute Business Edition v10.x and PowerChute Serial Shutdown v1.x)
UDP
161– PowerChute SNMP Agent
NOTE: Port 6547 must be open in the PC/Servers firewall to allow access to the Agent web UI, and port 161 must be open if SNMP access is required.
PowerChute allows you to create only one administrator account. This account has a unique login username and password, enabling full read/write access. It is strongly recommended that PowerChute not be made available on a public-facing network segment. This is to ensure secure user control. To further restrict access, TCP port 6547 (HTTPS) can be blocked using firewall settings to prevent remote access to the UI. The UI can still be accessed for the system running the software at https://localhost:6547.
It is recommended that you use a well-configured firewall in conjunction with an intrusion prevention system (IPS) to help protect PowerChute against Denial-of-Service attacks and unauthorized access.
- The firewall can be used to block access from untrusted/external networks and allow access only from trusted subnets.
- The IPS can be used to detect patterns of behavior associated with Denial of Service attacks.
It is strongly recommended that PowerChute is deployed in a secure location, where the PowerChute server and connected UPS are protected by physical restraints that prevent unauthorized access, and where access is restricted to those who maintain the equipment.