Ports used by System Platform products
- Last UpdatedSep 23, 2026
- 3 minute read
The tables in this section list the ports used by System Platform products.
Note: Firewall settings for all destination ports must allow INBOUND connections.
Port information is subject to change from release to release as security for System
Platform is enhanced. We recommend that you check your firewall settings to ensure
that all required communication is allowed.
Application Server
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
135 |
No |
TCP |
Bootstrap |
RPC |
|
139 445 |
No |
TCP |
Bootstrap |
NetBios |
|
443 |
No |
TCP (HTTPS) |
AVEVA.AppServer. BootstrapProxy.exe |
AVEVA.AppServer. BootstrapProxy.exe |
|
808 |
Yes |
TCP |
Multi-Galaxy |
Galaxy Pairing ASBAuthentication Service ASBGRBrowsing Service IOM BLS Service ASMBMxDataProvider Service |
|
5026 |
Yes |
TCP |
NMXSVC |
NMXSVC |
|
8090 |
Yes |
TCP |
aaGR |
aaGR |
|
30000 30001 |
Yes |
TCP/UDP TCP |
Bootstrap, Redundancy PMC |
Local redundancy messaging (WinPlatform) |
|
32568 |
Yes |
TCP |
aaEngine.exe |
aaEngine.exe |
|
48031 |
Yes |
TCP |
Platform Common Services |
OPC UA Server |
|
49152 – 65535 |
No |
TCP |
aaPIM |
DCOM |
AVEVA Historian
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
32565 |
Yes |
TCP |
aaClientAccessPointNG.exe |
Historian Client Access Point NG |
|
32568 |
Yes |
TCP |
AVEVA Historian |
AVEVA Historian as a real-time service |
|
32569 |
Yes |
TCP (HTPPS) |
Insight |
Insight on-premise gateway |
|
32573 |
Yes |
TCP (HTTPS) |
Historian Secured Gateway |
REST communications |
Device Integration (Communication Drivers Pack)
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
102 |
No |
TCP |
SiDirect OI Server |
Siemens PLC communication to OI Server |
|
135 |
No |
TCP |
DASEngine, OPC |
DCOM and RPC |
|
443 |
Yes |
TCP (HTTPS) |
GDIWebServer |
MQTT and Auto-Build configuration |
|
502 |
No |
TCP |
MBTCP OI Server |
Modbus communication to OI Server |
|
1883 8883 |
Yes |
TCP |
MQTT |
MQTT broker communication to OI Server |
|
2221 2222 2223 |
No |
TCP |
ABTCP OI Server |
Allen-Bradley PLC communication to OI Server |
|
5413 |
No |
TCP |
SuiteLink |
SuiteLink communication |
|
18245 |
No |
TCP |
GESRTP OI Server |
GE PLC communication to OI Server |
|
44818 |
No |
TCP |
ABCIP OI Server |
Allen-Bradley CIP PLC communication to OI Server |
|
See note, below |
Yes |
TCP |
OPC UA Services |
Remote access to the OPC UA servers |
Note: The Communication Drivers Pack uses the default OPC ports, which are are configurable.
For details, refer to the OPC Foundation documentation:
https://opcfoundation.github.io/UA-.NETStandard/help/firewall_settings.htm
InTouch
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
51218 |
No |
TCP |
Alarmmgr.exe |
Alarm Manager |
|
48032 – 65000 |
Yes |
TCP |
InTouch.OPCUA.ServiceHost.exe |
InTouch OPC UA |
InTouch Access Anywhere (ITAA)
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
443 |
Yes |
TCP |
EricomSecureGateway.exe |
Secure Gateway |
|
7433 |
Yes |
TCP |
EricomAuthenticationServer.exe |
Access Anywhere Authentication Server |
|
8080 |
Yes |
TCP |
EricomSecureGateway.exe AccessServer64.exe |
Communication between ITAA Server and ITAA Secure Gateway |
|
57111 |
No |
UDP |
EricomSecureGateway.exe |
Secure Gateway |
|
57733 57734 57735 |
No No No |
TCP |
AccessServer64.exe |
Server |
Licensing
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
80 |
Yes |
TCP (HTTP) |
License Manager |
Web Service |
|
443 |
Yes |
TCP |
License Manager |
License Manager outbound to activation server |
|
50051 |
Yes |
TCP (HTTPS) |
Licensing Platform |
Serve licensing requests from products |
|
55555 |
Yes |
TCP (HTTP) |
License Server |
License Server Translator service. Also required to support prior client versions from Server 4.0 |
|
55559 |
Yes |
TCP (HTTP/ HTTPS) |
License Server |
License Server core service |
|
59200 |
Yes |
TCP |
License Serve |
License Server Agent Service |
|
59201 |
Yes |
TCP (HTTPS) |
License Server |
License Server Agent Service |
OMI Web Client
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
80 808 |
No |
TCP (HTTP) |
VCP |
vcp.services.onprem. vcp.services.onprem. |
|
443 80 |
No |
TCP (HTTPS) |
VCP |
vcp.services.onprem. |
Operations Control Logger
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
135 |
No |
TCP |
RPC |
Used for dynamic port mapping |
Platform Common Services (PCS)
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
80 |
No |
TCP (HTTP) |
PCS |
PCS.ServiceManager.exe |
|
443 |
Yes |
TCP (HTTPS) |
PCS |
PCS.Agent.exe(Discovery) PCS.IdentityManager.Host.exe |
|
808 |
Yes |
TCP |
PCS |
WCF shared port |
|
1900 |
No |
UDP (SSDP) |
PCS |
PCS.IdentityManager.Host.exe SSDP |
|
7084 7085 |
No No |
TCP |
PCS |
System authentication during node registration |
SQL Server
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
1433 |
Yes |
TCP |
SQL Server |
SQL Server |
|
1434 |
No |
UDP |
SQL Server |
SQL Server browser |
System Monitor
|
Port |
Can be configured |
Protocol |
Subsystem |
Purpose |
|---|---|---|---|---|
|
25 |
Yes |
TCP (SMTP) |
System Monitor |
SMTP Server |
|
80 |
Yes |
TCP (HTTPS) |
System Monitor |
Sentinel Console Service |
|
443 |
Yes |
TCP (HTTPS) |
System Monitor |
Secure Sentinel Console Service |
|
587 |
Yes |
TCP (SMTP) |
System Monitor |
Secure SMTP Server |