What Ports do I need to open on my Firewall?

The first question often asked when exposing OCS functionality to the Internet is “what ports do I need to open on my firewall?”.

The answer depends on which Edge functionality (and the associated Role), being exposed to the Internet. Below is a concise recap of the default Ports that need to be opened to expose specific OCS functionality to remote users (on the Internet).

Edge Role	Functionality	External F/W Port	Internal F/W Port	Protocol
Reverse Proxy	Address Book, File Download, etc…	443	443	HTTP(S)
Access	Remote IM and Presence, Federation, Public IM	443, 5061	5061	SIP/MTLS
Web Conferencing	External Web Conf Participation	443	8057	PSOM/MTLS
Audio/Video Conferencing	External A/V Conf Participation	443, 3478, 50,000-59,999	443, 5062, 3478	STUN

Chapter 2.3 of the Office Communications Server 2007 Document: Edge Server Deployment Guide provides more detail, including the associated Firewall policies.