Use these network requirements to prepare your IT and local network environment for connecting your franking machine to the internet.
Products affected: Connect+® 500W, Connect+® 1000, Connect+® 2000, Connect+® 3000, SendPro® P1000, SendPro® P1500, SendPro® P2000, SendPro® P3000
If you have extensive network security restrictions, your IT or network administrator may need these specifications to prepare for the installation.
There are two options to unblock Teamviewer:
URL Information
It is strongly recommended that the firewall reference the URL rather than IP address, which can change over time. The following URLs must be accessible from the Connect+, SendPro P system, without any obstructions.
If IP addresses must be referenced, it is suggested to keep open the block of IP addresses below:- 199.231.32.0 to 199.231.47.255
- 152.144.128.0 to 152.144.128.255
- 209.85.128.0 to 209.85.255.255
- 193.242.234.1 to 193.242.234.255
- 74.125.230.80 to 74.125.230.84
- 130.57.1.88
- 31.193.129.122
- 104.91.38.137
Required URLs
- Network Test - Built in tool that pings select PB servers for connectivity testing. Used by PB Service (Resides on Linux Desktop).
- Network Test URLs:
- http://www.google.com
- http:// www.l.google.com
- http://www.novell.com
- Network Test IP Addresses:
- 74.125.230.80, 74.125.230.81
- 74.125.230.82, 74.125.230.83
- 74.125.230.84
- Network Test URLs:
- SUSE Linux Proxy Test
- SUSE Linux Proxy Test URLs:
- ftp.novell.com
- http://www.l.google.com
- SUSE Linux Proxy Test IP Addresses:
- 74.125.230.80
- 74.125.230.81
- 74.125.230.82
- 74.125.230.83
- 74.125.230.84
- 130.57.1.88
- SUSE Linux Proxy Test URLs:
- Distributor - Main PB Server that authenticates machine for access to other PB web services.
- Funds (Funds Management & Refills) - Funds are managed through a separate Funds Server system.
- Domain:
- distservp1.pb.com
- Distributor and Funds URLs
- http://distservp1.pb.com (Port 80)
- https://distservp1.pb.com (Port 443)
- http://comet2.ct.pb.com (Port 80)
- https://comet2.ct.pb.com (Port 443)
- Distributor and Funds IP Addresses:
- 199.231.44.31
- 199.231.45.46
- Domain:
- Rates and Updates (Download Services) - Downloads, new software, graphics, rate price data etc.
- Domains:
- pbgdspp1.pb.com
- clamserver.pb.com
- pbdlsp1.pb.com
- MyMS1Configuration.pb.com
- SMT.pb.com
- pbgdspp1.pb.com
- Misc. Data Upload URL:
- https://pbgdspp1.pb.com/MS1ConfigurationUpload/MS1ProductConfigurationUpload.svc
- Misc. Data Upload IP Addresses:
- 199.231.44.148
- 199.231.44.222
- 199.231.45.35
- 199.231.45.41
- ClamAV URL:
- http://clamserver.pb.com
- ClamAV IP Addresses:
- 199.231.33.54
- 199.231.35.165
- 199.231.44.54
- 199.231.45.165
- Error log upload URL:
- http://pbdlsp1.pb.com
- Error log upload IP Addresses:
- 199.231.44.30
- 199.231.45.38
- Configuration web page URL:
- https://MyMS1Configuration.pb.com
- Configuration web page IP Address:
- 199.231.44.166
- OS Updates URL:
- https://SMT.pb.com
- OS Updates IP Addresses:
- 199.231.35.165
- 199.231.44.54
- File Updates URL:
- https://pbgdspp1.pb.com/MS1/DlaService.svc
- File Updates IP Address:
- 199.231.44.222
- Orders (CCD) URL:
- https://pbgdspp1.pb.com/MS1CCD/DlaCCDService.svc
- Orders (CCD) IP Address:
- 199.231.44.222
- Domains:
- Manage Accounts (Accounting) - Separate PB Server that manages Accounting including Account Creation, Reports etc.
- Domain:
- ms1app.pb.com
- Domain:
- ms1appalm-kdc.pb.com
- Accounting Web Application URL:
- https://ms1app.pb.com
- Accounting Web Application IP Addresses:
- 199.231.32.67
- 199.231.35.4
- Accounting Web Services URL:
- https://ms1app.pb.com/ms1atweb/services/
- Accounting Web Services IP Address:
- 199.231.32.47
- Domain:
- On Line Help - This is the online support website.
- On Line Help URLs:
- http://eureka.pitneybowes.com/sendpro-p-series/en-gb/SDH003o-help-en-gb-4w/Default.htm
- http://eureka.pitneybowes.com/sendpro-p-series/en-gb/SDH003k-help-en-gb-1w/connect_plus_help.htm
- On Line Help IP Addresses vary due to using Amazon Web Services.
- On Line Help URLs:
- Health Data Update - Machine Health Information upload
- Domain:
- pb.com
- Health Data Update URL:
- https://cplus-logs-fusion.pb.com/api/v1/uploads
- Health Data Update IP Addresses:
- 199.231.33.6
- 199.231.44.12
- Domain:
Optional Firewall exceptions (enabled by default)
- Connect with PB - Utility website to contact Pitney Bowes
- Domain:
- pitneybowes.co.uk
- Connect with PB URL:
- http://www.pitneybowes.co.uk/connect-plus/conect-with-pb.shtml
- Connect with PB IP Address:
- 199.231.33.134
- Domain:
- Apps - Utility website for additional applications and tools.
- Apps URL:
- http://www.pitneybowes.co.uk/connect-plus/apps.shtml
- Apps IP Address:
- 199.231.33.134
- Apps URL:
- Parcels - Utility website for tracking and sending parcels.
- Parcels URL:
- http://www.pitneybowes.co.uk/connect-plus/parcels.shtml
- Parcels IP Address:
- 199.231.33.134
- Parcels URL:
- Buy Supplies - Utility website to order supplies.
- Buy Supplies URL:
- https://www.pitneybowes.co.uk/shop/franking-machine-supplies/shop-by-machine/sendpro-p-connect-plus-series/en-uk/storeuk
- Buy Supplies IP Address:
- 199.231.33.134
- Buy Supplies URL:
- News and Offers - Utility website for promotions and mailing news.
- News and Offers URL:
- http://www.pitneybowes.co.uk/connect-plus/news-and-offers.shtml
- News and Offers IP Address:
- 199.231.33.134
- News and Offers URL:
- Royal Mail - Utility website for Royal Mail links.
- Royal Mail URL:
- http://www.pitneybowes.co.uk/connect-plus/royal-mail.shtml
- Royal Mail IP Address:
- 199.231.33.134
- Royal Mail URL:
Optional firewall exceptions (disabled by default)
- Receive a Package - Receive a Package application.
- Domain:
- pitneybowes.com
- Receive a Package URL:
- http://sendsuitetracking.pitneybowes.com/
- Receive a Package IP Addresses:
- 199.231.33.6
- 199.231.44.12
- Domain:
- Shipping application
- Shipping Base URL:
- https://connectplus.pitneybowes.com
- Login URLs
- https://login2.pitneybowes.com/login
- https://pitneybowes.okta.com/oauth2/ausfhsvbplYEHWveV1t7/v1
- Shipping Base URL:
TeamViewer
TeamViewer is used by service and sales for remote diagnostics and training. A TeamViewer session can only be initiated by someone on the customer end and therefore the system cannot be accessed without the customers knowledge. All communication is initiated from the Connect+, SendPro P system via ports 80 (HTTP) and 443 (HTTPS). All communication from the Connect+, SendPro P system to the back end system is in the form of XML messages.There are two options to unblock Teamviewer:
- General unlocking of Port 5938 TCP for outgoing connections (recommended). Port 5938 is only used by a few programs and therefore is no security risk. This traffic should then neither be filtered or cached.
- Unlocking of URLs of the following formats (to any Server)
- GET /din.aspx?s=…&client=DynGate…
- GET /dout.aspx?s=…&client=DynGate…
- POST /dout.aspx?s=…&client=DynGate…
- *.teamviewer.com
- *.dyngate.com
Communications
- All communication is initiated from the Connect+, SendPro P system via ports 80 (HTTP) and 443 (HTTPS).
- All communication from the Connect+, SendPro P system to the back end system is in the form of XML messages.
- OS Update
- AV Updates
- Web Services
- TeamViewer
- The Connect+, SendPro P system will send requests to refill or audit its PSD (Postal Security Device) based on a low funds or inspection date. Audits occur if the PSD inspection date has expired.
- Transaction Records from the Connect+, SendPro P system are automatically uploaded when:
- The system goes into Sleep Mode.
- While powering down the system.
- Activating Web Accounting Services.
- Uploading Postal Information.
- On power up the system refreshes the web service (checks for Software, Rates and Graphic Updates. It will also contact Supplies, My Account, Tracking etc.) configuration data.
- DNS lookup
Advanced Network Requirements
- The Connect+, SendPro P system will require a high-speed network connection.
- The Connect+, SendPro P system will initiate all communication.
- The Connect+, SendPro P system will initiate all communication (via HTTP or HTTPS), so it can safely sit behind most corporate firewalls.
- The Connect+, SendPro P system will communicate to external Web Services via HTTP over Port 80.
- The Connect+, SendPro P system will communicate to PB secure server(s) via HTTPS over port 443.
- The Connect+, SendPro P system will use Port 53 for DNS lookup.
- Pitney Bowes requires a minimum network bandwidth of 384 kbps (upstream and downstream) to operate, but we recommend 1 Mbit/sec for best performance.
- It is recommended that 3G modem devices are not shared across multiple Connect+, SendPro P systems.
- Customer owned web filtering devices or software, as well as SSL packet inspection should be disabled for these ports as they can affect performance.
- The wired Ethernet port supports 10/100 MBit/sec connections. If using a GigaBit port, please enable the ability for it to auto-negotiate down to a 10/100 MBit/sec connection.
Comments
0 comments
Please sign in to leave a comment.