Kerio Tech KERIO WINROUTE FIREWALL 6 - Manual (Page 11)

2.3 System requirements
11
• 53/UDP — DNS module,
• 67/UDP — DHCP server,
• 1900/UDP — the SSDP Discovery service,
• 2869/TCP — the UPnP Host service.
The SSDP Discovery and UPnP Host services are included in the UPnP support
(refer to chapter 18.2 ).
• 44333/TCP+UDP — traffic between Kerio Administration Console and WinRoute
Firewall Engine. This service cannot be stopped.
The following services use corresponding ports by default. Ports for these services can
be changed.
• 443/TCP — server of the SSL-VPN interface (only in WinRoute on Windows — see
chapter 24 ),
• 3128/TCP — HTTP proxy server (see chapter 8.4 ),
• 4080/TCP — web interface of the firewall (refer to chapter 11 ),
• 4081/TCP — secured (SSL-encrypted) version of the firewall’s web interface (see
chapter 11 ) ,
• 4090/TCP+UDP — proprietary VPN server (for details refer to chapter 23 ).
Antivirus applications
Most of the modern desktop antivirus programs (antivirus applications designed to pro-
tect desktop workstations) scans also network traffic — typically HTTP, FTP and email
protocols. WinRoute also provides with this feature which may cause collisions. Therefore
it is recommended to install a server version of your antivirus program on the WinRoute
host. The server version of the antivirus can also be used to scan WinRoute’s network
traffic or as an additional check to the integrated antivirus McAfee (for details, see chap-
ter 13 ).
If the antivirus program includes so called realtime file protection (automatic scan of
all read and written files), it is necessary to exclude directories cache (HTTP cache in
WinRoute see chapter 8.5 ) and tmp (used for antivirus check). If WinRoute uses an
antivirus to check objects downloaded via HTTP or FTP protocols (see chapter 13.3 ), the
cache directory can be excluded with no risk — files in this directory have already been
checked by the antivirus.
The McAfee integrated antivirus plug-in does not interact with antivirus application in-
stalled on the WinRoute host (provided that all the conditions described above are met).
2.3 System requirements
Requirements on minimal hardware parameters of the host where WinRoute will be installed:
• CPU 1 GHz,
• 1 GB RAM,
• Two network interfaces (including dial-ups).
For Windows: