Process using Static TCP/UDP Ports

Port Type Protocol

21 TCP FTP
23 TCP Telnet

25 TCP SMTP 

67 UDP DHCP/BootP Server

68 UDP DHCP/BootP Client

69 UDP TFTP 

80 TCP HTTP

123 UDP NTP, SNTP

135 TCP RPC/Endpoint Mapper 

161 UDP SNMP 

300 UDP Proprietary 
319 UDP PTP
320 UDP PTP
400 TCP RPC 
401 TCP
402 TCP
403 TCP

443 TCP HTTPS

445 TCP SMB
500 UDP  IKE 
502 TCP ModbusTCP 
990  TCP  FTPS
1001 UDP Proprietary
1089 TCP/UDP ff-annunc 
1090 TCP/UDP ff-fms 
1091 TCP/UDP ff-sm 

1123 UDP SNCP

1124 UDP SNCP

1132 TCP SNCP

1330 TCP rnaprpc 
1331 TCP rnaserv 
1332 TCP rnaserverping

1433 TCP

1434 UDP

1947 TCP/UDP

2000 TCP Modbus RTU

2010 UDP Discover tool

2011
2221 TCP
2221 UDP rockwell-csp1

2222 TCP  CSP

2222 UDP EtherNet/IP

2222 TCP
3060 TCP rnadirft
3622 TCP/UDP ff-lr-port
4000 UDP Peer to Peer
4120 TCP RPC
4121 TCP RPC
4122 TCP RPC
4123 TCP RPC
4124 TCP RPC
4125 TCP RPC
4241 TCP 
4243 TCP
4245 TCP
4255 TCP
4446 TCP TCP/IP
 4840 TCP
4840 TCPV6
4990 TCP
4990 TCPV6
4991 TCP
4991 TCPV6
5000 UDP Peer to Peer
5241 TCP TCP/IP
5450 TCP
5454 TCP
5455 TCP
5456 TCP
5457 TCP
5458 TCP
5459 TCP
5463 TCP 
6000 TCP
6000 TCP Workbench
6543 TCP rnaalarming
6904 UDP
7002 TCP
7003 TCP
7004 TCP
7147 TCP TCP/IP
7153 TCP
7155 TCP
7600 TCP
7700 TCP
7710 TCP
7720 TCP
7721 TCP
7722 TCP
7723 TCP
8080 TCP HTTP
8081 TCP HTTP
8083 TCP HTTP
8141 TCP HTTP/Socket.io
8443 TCP HTTPS 

8732 TCP WCF

9111 TCP

10001 TCP Serial data

10010 TCP TCP/IP
10011 TCP TCP/IP
10086 TCP TCP/IP
12315 TCP
21061 UDP
22350 TCP
22350 UDP
22350 TCPV6
22350 TCP/UDP TCP/IP
22352 TCPV6
27000 TCPV6

27000 TCP TCP/IP

27024 TCP
27027 TCP
27050 TCP
27051 TCP
27052 TCP
27053 TCP
27054 TCP
27055 TCP
27056 TCP
27100 TCP
30064 TCP Net.Tcp
32407 TCP

44818 TCP EtherNet/IP

44818 UDP EtherNet/IP

49281 TCP TCP/IP

54967 TCP TCP/IP 

55555 TCP Telnet

60093 TCP TCP/IP
60128 TCP HTTP

60256 TCP TCP/IP

65207 TCP TCP/IP
Ping
DP Ports
Product
PowerMonitor 1000/PowerMonitor 5000
Trusted - AADvance before release 1.3, 1715-AENTR release 1.5

1769-L35E , 1769-L32E, 1756-ENBT, 1756-EN2T, 1756-EWEB, 1768-

ENBT, 1768-EWEB, 1788-ENBT, 1763-L16x, 1766-L32x, FactoryTalk
AssetCentre, FactoryTalk Transaction Manager, RSBizWare, RSSQL,
RSView Messenger

1756-ENET, 1756-ENBT, 1756-EWEB, 1756-EN2T, 1794-AENT, 1734-

AENT, 1769-L35E, 1769- L32E, 1788-ENBT, 1761-NET-ENI, 1785-LXXE,
1785-ENET, 1747-L55x, 1791ES, 1763-L16x, 1766-L32x, 5820-EI,
PowerFlex Drives, PowerMonitor 1000, PowerMonitor 3000,
PowerMonitor 5000, PanelView Plus

1756-ENET, 1756-ENBT, 1756-EWEB, 1756-EN2T, 1794-AENT, 1734-

AENT, 1769-L35E, 1769- L32E, 1788-ENBT, 1761-NET-ENI, 1785-LXXE,
1785-ENET, 1747-L55x, 1791ES, 1763-L16x, 1766-L32x, 5820-EI,
PowerFlex Drives, PowerMonitor 1000, PowerMonitor 3000,
PowerMonitor 5000, PanelView Plus
5820-EI

1715-AENTR, 1756-ENET, 1756-ENBT, 1756-EWEB, 1756-HISTx, 1794-

AENT, 1734-AENT, 1769-L35E, 1769-L32E, 1788-ENBT, 1761-NET-ENI,
1785-LXXE, 1785-ENET, 1747-L55x, 1763-L16x, 1766-L32x, PowerFlex
Drives, PowerMonitor 1000, PowerMonitor 3000, PowerMonitor 5000,
PanelView Plus, RSBizWare, RSView32, FactoryTalk View SE, RSViewSE,
FactoryTalk VantagePoint, FactoryTalk ViewPoint, FactoryTalk Analytics
for Devices
PowerMonitor 1000, PowerMonitor 3000, PowerMonitor 5000,
AADvance

FactoryTalk, RSMACC, RSView32 RADS, RSLinx Classic, RSLinx Enterprise,

FactoryTalk Gateway, FactoryTalk Historian Site Edition

1756-ENET, 1756-HISTx, 1756-ENBT, 1794-AENT, 1734-AENT, 1769-L35E,

1769-L32E, 1788-ENBT, 1761-NET-ENI, 1785-LXXE, 1785-ENET, 1747-
L55x, 1766-L32x, 5820-EI, PowerFlex Drives, PowerMonitor 3000
PowerMonitor 1000, PowerMonitor 3000, PowerMonitor 5000
Studio 5000 Clock Sync Service Tool
Studio 5000 Clock Sync Service Tool
FactoryTalk Transaction Manager RSSQL
FactoryTalk Transaction Manager Compression Server
FactoryTalk Transaction Manager Configuration Server
FactoryTalk Alarms & Events
FactoryTalk ViewPoint, 1756-HISTx, PowerMonitor 1000, FactoryTalk
Analytics for Devices
FactoryTalk Historian Site Edition
1756-EN2TSC
AADvance, Trusted, PowerMonitor 1000
 PowerMonitor 1000
1426 PowerMonitor 5000

AADvance

AADvance

AADvance
FactoryTalk
FactoryTalk
FactoryTalk Services

FactoryTalk AssetCentre (server), FactoryTalk VantagePoint RSMACC

FactoryTalk AssetCentre (server), FactoryTalk VantagePoint

SafeNet Sentinel Local License Manager

AADvance (Slave only), Trusted (Master or slave, used for OPC and SOE)

AADvance
AADvance
FactoryTalk Linx
Rockwell CSP1

1785-Lxxe, 1785-ENET, 1771-DMC(x), 1747-L55x, 5820-EI, PowerMonitor

II, RSLinx Classic, INTERCHANGE, PowerMonitor 1000, PowerMonitor
3000, PowerMonitor 5000, PanelView 5000
1715-AENTR, 1756-ENBT, 1794-AENT, 1734-AENT, 1769-L35E, 1769-
L32E, CompactLogix 5370, 1788-ENBT, Trusted, AADvance
RSLinx Classic
FactoryTalk Services

Trusted
RSBizWare
RSBizWare 
RSBizWare 
RSBizWare 
RSBizWare 
RSBizWare 
RSLinx Enterprise, FactoryTalk Linx
FactoryTalk View SE HMI Tag server (CPR9 SR6 and higher)
FactoryTalk Linx
FactoryTalk Services
FactoryTalk Diagnostics (CPR9 SR3)
OPC Foundation UA Discovery Server
OPC Foundation UA Discovery Server
FactoryTalk Linx Gateway UA
FactoryTalk Linx Gateway UA
FactoryTalk Linx Gateway UA
FactoryTalk Linx Gateway UA
Trusted, AADvance
FactoryTalk Services, FactoryTalk Diagnostics (CPR9 SR4 and greater)
FactoryTalk Historian Site Edition, 1756-HISTx
FactoryTalk Historian Site Edition
FactoryTalk Historian Site Edition
FactoryTalk Historian Site Edition
FactoryTalk Historian Site Edition
FactoryTalk Historian Site Edition
FactoryTalk Historian Site Edition
FactoryTalk Historian Site Edition 
FactoryTalk Historian Site Edition
Trusted 
FactoryTalk Alarms & Events
FactoryTalk Services
FactoryTalk AssetCentre Server
FactoryTalk AssetCentre Server
FactoryTalk AssetCentre Agent
FactoryTalk Diagnostics Local Reader (CPR9 SR4 and greater)
FactoryTalk Linx
FactoryTalk Linx Gateway UA
FactoryTalk  
FactoryTalk  
FactoryTalk  
RSView SE, FactoryTalk View SE
RSView SE, FactoryTalk View SE
RSView SE, FactoryTalk View SE
RSView SE, FactoryTalk View SE
RSBizWare, 1756-HISTx
RSBizWare 
CTP Server
FactoryTalk TeamONE Alarm Connector
 1756-HISTx (v3.50 and higher only)

FactoryTalk Historian Site Edition

FactoryTalk Services

AADvance
FactoryTalk View SE (v13.0)
FactoryTalk View SE (v13.0)
FactoryTalk View SE (v13.0)
FactoryTalk Alarms & Events (v6.20 & v6.21)
FactoryTalk AssetCentre Agent
CodeMeter
CodeMeter
CodeMeter
FactoryTalk Activation Manager
CodeMeter
FactoryTalk Activation

FactoryTalk Activation Server; FactoryTalk Activation Manager

Studio5000
Studio 5000
Studio5000
Studio5000
Studio5000
Studio5000
Studio5000
Studio5000
Studio5000
Studio5000
FactoyTalk Updater
KEP Server Enterprise

1715-AENTR, 1756-ENBT, 1756-ENET, 1756-EWEB, 1768-ENBT, 1794-

AENT, 1734-AENT, 1769-L35E, 1769-L32E, CompactLogix 5370, 1788-
ENBT, 1761-NET-ENI, 1785-LXXE, 1785-ENET, 1747-L55x, 1763-L16x,
1766-L32x, AADvance (Produce/Consume tags only), Trusted (fixed
Produce/Consume tags only, PowerMonitor 1000, PowerMonitor 3000,
PowerMonitor 5000, PanelView Plus, PanelView 5000, RSLinx Classic,
RSLinx Enterprise, INTERCHANGE (rsicd), FactoryTalk Analytics for
Devices
FactoryTalk Linx (RSLinx Enterprise), RSLinx Classic
FactoryTalk Live Data, FactoryTalk View SE HMI Tag server(CPR9 SR4 and
earlier)

FactoryTalk Activation Manager

AADvance from release 1.3, 1715-AENTR from release 2.002 ('SIL2')

FactoryTalk Diagnostics (CPR9 SR2 and earlier)
FactoryTalk Updater

ControlFLASH Plus
FactoryTalk VantagePoint
FactoryTalk Alarms & Events (v6.20 & v6.21)
Process/Comment
Log File Retrieval
Diagnostic command line interface

Outbound email only

For binary download, used in conjunction with BootP

FactoryTalk ViewPoint and VantagePoint EMI server can use any other custom
assigned port 

Network time protocol

DCOM endpoint mapper. Historiansrv.dll use to get licensing Info and PI Trust
Relation from PI components

connection to SNMP daemon

Master/Slave configuration, Broadcast Port Range 300-400 (Default 300)
Time-critical event messages
General messages
Transaction Manager
Compression Server
Configuration Server
FTAE_HistServ.exe
When using web server with secure Certificate, HTTPS connection to Web
interface, Web Interface and Certificate
Config collective servers trust relation between two servers
Internet Protocol Security (IPsec)
Master or slave
Secure file server
Waveform synchronized broadcast, Uses port range 1001-1009
Foundation Fieldbus

Binding network between AADvance systems (ISaGRAF Exchange Layer, IXL), open
on Producer
Binding network between AADvance systems (ISaGRAF Exchange Layer, IXL),
Open On Consumer
Safety Network Control Protocol (SNCP), used by OPC server and workbench for
debugging, download, sequence of events
Object RPC
Service control
Server health, RdcyHost.exe

SQL Server communication (default port)

Recommended static destination port for MSSQL to minimize the number of ports

open on a firewall. See MS KnowledgeBase article 287932.

Windows Service installed by Sentinel USB HASP driver. This service is not required
for USB dongle to function. For more information and to disable this service see
AID-570831

RTU packaged in serial stream. Other ports may be assigned.

Used to configure systems. The tool sends broadcast to 2010 and systems reply to
port 2011
Configuration reply port
RSLinxNG.exe
RSLinx Classic

Port 2223 is the source port for connections

I/O communications used only by products that support I/O over EtherNet/IP.
RSLINX.EXE
Directory Server file transfer. RnaDirServer.exe

Original simplex protocol

Production Server
Server Manager
PlantMetrics Server
Task Manager
Scheduler Server
Scheduler CTP Server
FactoryTalk Live Data Message for RSLinx Enterprise (RSLinxNG.exe)
TagSrv.exe
RSLinxNG02.EXE
RsvcHost.exe
See AID:  68260 for additional info
opcualds.exe
opcualds.exe
FTLinxGatewayUA.exe, Configurable in GUI
FTLinxGatewayUA.exe, Configurable in GUI
FTLinxGatewayUA.exe
FTLinxGatewayUA.exe
Enhanced (new) protocol
See AID:  68260 for additional info. RsvcHost.exe
PI Network Manager
Analysis Framework v1.x
Analysis Framework v1.x
ACE 2 scheduler
Asset Framework Server
PI Notifications
Asset Framework to OLEDB Enterprise
Asset Framework Analysis Service (v5.01 and higher) 
FTLDInt Agent Service
Online debugger
RnaAeServer.exe
RsvcHost.exe
RA.FTAC.Server.exe
RA.FTAC.Server.exe, Configurable in GUI
RA.FTAC.AgentControllerService.exe, Configurable in GUI
RNADiagnosticsSrv.exe
RSLinxNG.exe
RnaUaClientDataProvider.exe
Event Multiplexor
Event Server
Directory Server
HMI Server
Server Framework
HMI Activation
Historical Data Log Reader
Production Server, reports, FTHME Diagnostic Interface
Server Manager

HTTPS connection to Diagnostics interface

Provide http service for communication between PI component and historian.

RnaAeServer.exe

Transparent Communication Interface, where an Ethernet host can talk through

AADvance to a serial port (serial tunneling), Uses port range 10001 - 10006 
FTViewProjectService.exe
TagSrv.exe
DatalogReadExService.exe
Used by Rockwell Data Access Service that accesses the FTAE database.
RA.FTAC.AgentControllerService.exe, RA.FTAC.Client.exe,
ViewPoint.Server.AlarmService.exe, ViewPoint.Server.Recipe.WindowsService.exe,
ViewPoint.Server.StringServer.WindowsService.exe,
ViewPoint.Server.ViewPointAdminServer.WindowsService.exe
CodeMeter.exe
CodeMeter.exe
CodeMeter.exe
CodeMeter runtime server
CmWebAdmin.exe
lmgrd.exe
See AID-35717  and AID-184922 for more Applications required to run
FLEXSVR.EXE and LMGRD.EXE, ports 27000 - 27009 are used
daq.exe
ramkMsgKernelSvc.exe
raOSGi.exe
raOSGi.exe
raOSGi.exe
raOSGi.exe
raOSGi.exe
raOSGi.exe
raOSGi.exe
raOSGi.exe
Allow access to Updater Agent service to change Server address
server_runtime.exe

Messaging, data transfer, upload/download, peer messaging, etc. Used largely

by RSLinx. RSLinxNG.exe, RSLINX.EXE
RSLinxNG.exe, RSLINX.EXE. Unsolicited Messaging

HMI Tag Server

Service Name: FactoryTalk Activation Helper. Executable Name:

FTActivationBoost.  If 54967 is not free, it tries 54977, 54987, 55967, 55977,
55987, 61967, 61977, 61987

Diagnostic command line interface

See AID:  68260 for additional info
Updater Client use this port for PCDC Login, listen the callback from AM
Executable Name: ControlFLASH_Plus.exe. If 60256 is not free, it tries 60257-
60265 and chooses one.
Incuity Server Advertiser
The Ping command must be allowed to go through the firewall when: 1) the
firewall is between the remote SQL database and the Alarms & Events server;
2)the SQL server computer stays in the same domain but different network from
the Alarms & Events server computer.
Processes using Dynamic TCP/UDP Ports
Process Name Type
ActivationNotifier.exe TCP
ActivationNotifier.exe TCPV6
AlarmQB.exe TCP
AlarmQB.exe TCPV6
CodeMeterCC.exe TCPV6
CommandCliSrv.exe UDP
CommandCliTagHMIService.exe TCP
CommandErrorLogSrv.exe TCP
DaClient.exe TCP
daq.exe TCP
DatalogServ.exe TCP
DatalogServ.exe UDP
DerivedTags.exe TCP
DerivedTags.exe UDP
DIBServer.exe TCP
DISPLA~2.EXE UDP
DISPLA~2.EXE TCP
DlgRdRp.exe TCP
DlgRdServ.exe TCPV6
DlgRdServ.exe UDP
DlgRdServ.exe TCP
EventClientMultiplexer.exe TCP
EventClientMultiplexer.exe TCPV6
EventDetector.exe TCP
EventDetector.exe UDP
EventServer.exe TCP
flexsvr.exe TCP
flexsvr.exe TCPV6
FTActivationBoost.exe TCP
FTCounterMonitor.exe TCP
FTLinxNameService.exe TCP
FTLoginLogout.exe UDP
FTViewServiceHost.exe TCPV6
FTViewServiceHost.exe TCP
HMIREC~1.EXE TCP
HMIREC~1.EXE TCPV6
NmspHost.exe TCP
RA.FTAC.AgentControllerService.exe TCP
RA.FTAC.AgentControllerService.exe UDP
RA.FTAC.Client.exe UDP
RA.FTAC.Client.exe TCP
RA.FTAC.Server.exe TCPV6
raOSGi.exe TCP
RdcyHost.exe TCP
RECIPE~2.EXE TCP
RECIPE~2.EXE UDP
RnaAeServer.exe TCP
RnaAlarmDetector.exe TCP
RnaAlarmMux.exe TCP
RNADirMultiplexor.exe TCP
RnaDirServer.exe TCP
RSLINX.EXE TCPV6
RSLINX.EXE TCP
RSLinxNG.exe TCPV6
RSLinxNG.exe TCP
RSLinxNG02.EXE TCP
RsvcHost.exe TCP
RsvcHost.exe TCPV6
ServerFramework.exe TCP
ServerFramework.exe TCPV6
TagSrv.exe TCP
ViewPoint.Server.AlarmService.exe UDP
ViewPoint.Server.StringServer.WindowsService.exe TCP
ViewPoint.Server.StringServer.WindowsService.exe UDP
ViewPoint.Server.ViewPointAdminServer.WindowsService.exe TCPV6
ViewPoint.Server.ViewPointAdminServer.WindowsService.exe TCP
ViewPoint.Server.ViewPointAdminServer.WindowsService.exe UDP
VStudio.exe TCP
VStudio.exe UDP
Product
FactoryTalk Activation
FactoryTalk Activation
FactoryTalk View Alarm Quaterback
FactoryTalk View Alarm Quaterback
CodeMeter Control Center
FactoryTalk View Command Client Server
FactoryTalk View Command Client Tag HMI Service Module
FactoryTalk View CommandErrorLogSvr Module
FactoryTalk Live Data Test Client
View Designer
FactoryTalk Datalog Runtime Server
FactoryTalk Datalog Runtime Server
FactoryTalk View Derived Tags Server Module
FactoryTalk View Derived Tags Server Module
FactoryTalk View DIB Server MCF Application

FactoryTalk View Datalog Read Client Side RP

FactoryTalk View Datalog Read Server
FactoryTalk View Datalog Read Server
FactoryTalk View Datalog Read Server
Event Client Multiplexer
Event Client Multiplexer
FactoryTalk View Event Detector Module
FactoryTalk View Event Detector Module
FactoryTalk Event Server
FactoryTalk Activation Daemon
FactoryTalk Activation Daemon
FactoryTalk Activation Boost
FactoryTalk Diagnostics Counter Monitor
FactoryTalk Linx Name Service
FactoryTalk Login Logout Module
FactoryTalk View Studio Activation Host
FactoryTalk View Studio Activation Host
FactoryTalk View HMI Recipe Worker Server
FactoryTalk View HMI Recipe Worker Server
Rockwell Namespace Services
FactoryTalk AssetCentre Agent Controller Service
FactoryTalk AssetCentre Agent Controller Service
FactoryTalk AssetCentre Client
FactoryTalk AssetCentre Client
FactoryTalk AssetCentre Server
Studio 5000 Commons Daemon Service Running
Rockwell Redundancy Services
FactoryTalk View Recipe Worker Client
FactoryTalk View Recipe Worker Client
FactoryTalk Alarms and Events Alarm Server
FactoryTalk Alarms and Events
FactoryTalk Alarms and Events
FactoryTalk RNA Directory Client Multiplexor
FactoryTalk RNA Directory Server
RSLinx Classic
RSLinx Classic
FactoryTalk Linx
FactoryTalk Linx
FactoryTalk Linx Instance 02
Rockwell Application Services
Rockwell Application Services
View Studio Server Framework
View Studio Server Framework
FactoryTalk View Tag Server
FactoryTalk ViewPoint Alarm Server Service
FactoryTalk ViewPoint String Service
FactoryTalk ViewPoint String Service
FactoryTalk ViewPoint Admin Service
FactoryTalk ViewPoint Admin Service
FactoryTalk ViewPoint Admin Service
FactoryTalk View Studio
FactoryTalk View Studio
Software versions used in testing:
CodeMeter Runtime Kit v6.70
FactoryTalk Activation Manager 4.03.03
FactoryTalk Alarms and Events 6.11.00 (CPR9 SR11)
FactoryTalk AssetCentre Client/Server 9.00.00
FactoryTalk Services Platform 6.11.00 (CPR9 SR11)
FactoryTalk Diagnostics 6.00.00 (CPR9 SR11)
FactoryTalk Linx 6.11.00 (CPR 9 SR11.0)
FactoryTalk Linx Gateway (CPR9 SR11.0)
FactoryTalk Linx Data Bridge
FactoryTalk View Site Edition Client 11.00.00 (CPR9 SR11)
FactoryTalk View Site Edition Server 11.00.00 (CPR9 SR11)
FactoryTalk View Site Edition Studio 11.00.00 (CPR9 Sr11)
FactoryTalk ViewPoint SE 11.00.00 (CPR9 SR11)
RSLinx Classic 4.10.00 CPR 9 SR 11.0
KEP Server Enterprise 6
Studio 5000 Logix Designer v32.00.00 (CPR9 SR11)