Page tree

Skip to end of metadata
Go to start of metadata

How to Set Firewall Rules

Firewall Changes

By default we deny all inbound traffic from the Internet to your IP block except for ping (ICMP Echo---used to verify that the host is up).  Otherwise, initial access rules are configured based on the customer questionnaire. 

Since the new API 0.176 was released, there is no need to open an Xandr support ticket to make changes to the Access Control List (ACL).  You can set and modify Access Control Entries (ACEs) yourself with new parameters in the manage-vlan CLI tool, which gives you immediate and flexible control.  For details on managing your firewall, please see Managing ACLs.

(warning) Note that in case you need to open SNMP to your instances/VLANs it's not enough to open 161 port via manage-vlan, as we need to "make a hole" on our borders as well. Please, open a Support ticket, requesting the task.

List of Standard Ports

For reference, here is a List of Standard Ports.

Port Ranges Enabled Within the Cloud

For reference, here is a list of Enabled Port Ranges.

Xandr Specific ACLs

If you are specifically interested in allowing the Xandr Impression Bus to hit your bidders, please use the IP ranges of Xandr VLANs (subnets) from the below table:



IP address


New Jersey


Los Angeles









Open Ports For FTP

Active FTP

  • Open port 21 only.

Passive FTP

  • Open a secondary range of ports in addition to port 21.

We recommend configuring ports 40000--41000 in your FTP software.  Our equipment is already set up to use the same range, however, it could be reconfigured if there are specific reasons to use a different port range.

  • No labels