Required firewall settings for Intel Unite 4.0 Hub/Server/Client communication

[JMilb]

Hello, we are trying to get our Intel Unite 4.0 Hubs working with our guest wifi. Guest wifi is firewalled from most of our campus network, and I need to know what protocol and ports need to be opened for the IPs of the Unite Hubs and Server.

I have reviewed this document, but it is geared toward endpoint firewalls and seems to be out of date. Is there newer documentation available?

https://www.intel.com/content/dam/support/us/en/documents/software/software-applications/Intel_Unite_Firewall_Help_Guide.pdf

[Wanner_G_Intel]

Hello JMilb, Thank you for joining this Intel Community. First, we would like to confirm if you are trying to use a guest network to configure the hub or if you are trying to use the guest network to get other users connected. Wanner G. Intel Customer Support Technician Under Contract to Intel Corporation

[JMilb]

Hi Wanner,

We are trying to allow users on our guest network to connect to the hubs with the Unite client. The hubs are already configured.

Best,

Jon

[Wanner_G_Intel]

Hello JMilb, Thank you for your response. To allow guest client devices to connect to a hub, we have developed the Guest Access Plug-in Guide for the Intel Unite® app. Intel Unite® App Plug-Ins https://downloadcenter.intel.com/download/28253/Intel-Unite-App-Plug-Ins Guest Access Plug-in Guide for the Intel Unite® app https://www.intel.com/content/www/us/en/support/articles/000022053/software.html Please review the documentation available, and if you have any further questions, please let us know. We will be glad to assist you. Wanner G. Intel Customer Support Technician Under Contract to Intel Corporation

[JMilb]

Hi Wanner, Sorry if I was unclear - I am actually looking for the required protocols/ports to be allowed on our enterprise network firewall between Unite clients and our Hubs and Server. Best, Jon

[Wanner_G_Intel]

Hello JMilb, Thank you for your response. We will do further research about this request. Please provide the following information: 1. Run the Intel® System Support Utility and attach the report to this thread. 1.Download the Intel® System Support Utility and save the application to your system. https://downloadcenter.intel.com/download/25293/Intel-System-Support-Utility-for-Windows-?product=91600 2.Open the application and click Scan to see system and device information. The Intel® System Support Utility defaults to the Summary View on the output screen following the scan. Click the menu where it says summary to change to Detailed View. 3.To save your scan, click Next and click Save. You can save the file to any accessible location on your computer. 2. Please attach the Microsoft Msinfo* 3. Please fill out this information: User Information Company Name: Contact: Email: Telephone (office): Telephone (mobile): Secondary contact name and email: Opt-in Section Disclaimer: By opting-in, you agree to allow Intel to contact you via e-mail in the future with regard to Unite software. Initial Here: Problem details Problem description: Frequency of occurrence (once an hour, day, always): Steps to reproduce (provide links to forums, online help, screen shots): Attempted workaround (settings changes, etc.): Environment (office, enterprise, school, hospital, factory, home): HUB/Client computer details HUB manufacturer(s): HUB model(s) and SKU: Client model(s): Windows OS (provide Version number if Win10, and 32- or 64-bit) and update version: Intel Unite® Client version: Intel Unite® HUB version: Intel Unite® Server version: It is worth noting that the guide recommended for firewall issues is the guide posted at the beginning: Intel Unite Firewall Help Guide https://www.intel.com/content/dam/support/us/en/documents/software/software-applications/Intel_Unite_Firewall_Help_Guide.pdf Note: If you would like to send this information via email, please let us know. Wanner G. Intel Customer Support Technician Under Contract to Intel Corporation

[Wanner_G_Intel]

Hello JMilb, If you have any further questions, we will be glad to assist you . Wanner G. Intel Customer Support Technician Under Contract to Intel Corporation

[AVeto]

The answer is TCP/443 and TCP/80.

[JMilb]

Hey AVeto,

Thanks for the reply - I just managed to figure out our firewall settings yesterday. It's frustrating that the support folks only want to offer instructions for endpoint firewalls, since most enterprise customers are going to be firewalling their 'guest' wireless networks from the rest of their systems, and will therefore run into this issue.

At any rate, I did find that the Unite 4.0 clients need to be able to reach HTTP/S ports (80/443) on the Unite Server. However, the Unite 4.0 Hub software defaults to listening on a random TCP port for the connection from clients. As such, you either have to allow all TCP traffic from clients to hubs, or change the Network Port option for Hubs in the server admin portal so that you can narrow down to a single port.

Finding Hub configuration options is also oddly difficult, since it isn't actually in 'Configurations'. Instead, it's on the Hub/Client group and list page, where you drop down and select 'Group Details' . Unintuitive admin UI/UX choices aside, the software seems to work quite well once everything is able to communicate.

Hope that port info helps others avoid all the trouble!

[Wanner_G_Intel]

Hello JMilb, Thank you for your feedback. It is highly appreciated. We also thank you for sharing your findings and the steps you took to address this issue. Wanner G. Intel Customer Support Technician Under Contract to Intel Corporation

[jszabo]

 tcp 49152-65535 works for me.  Having the program run in the user's profile, and requiring a firewall rule for each user, is a bad design.