NCR Command Center:

Firewall Setup

Command Center Operations Certificate Validation

For core Command Center operations, the site needs out-
CMCAgent and CMCSvcWatcher are digitally signed applica-
bound access on ports 443 and 80 (port 8050 can be substi-
tions and require the site certificate to be validated with
tuted for 80) for the following URL:
crl.godaddy.com and crl.verisign.com prior to connecting to
 https://rdf2.alohaenterprise.com the datacenter. For certificate validation, the site needs
outbound access on port 80 for the following IP addresses:
Note: All external Command Center communications are
encrypted. Configure port 8050 if using SPI on port 80.
GoDaddy Validation Verisign Validation
PVNC requires outbound access on either port 22, 80, or 443
for the following URL:  72.167.18.237  199.7.48.0/20
 72.167.18.238  199.7.71.0/24
 ssh.alohaenterprise.com
Online Ordering requires outbound access on port 8082 for  72.167.239.237  199.7.72.0/22
the following IP:  72.167.239.238  199.7.76.0/24
 206.121.123.25  188.121.36.237
 188.121.36.238
 182.50.136.237
 182.50.136.238
Terminal Communications
 50.63.243.228
For communication between BOH/Fileserver and Terminals, the
following exceptions are required if internal firewall rules are in  50.63.243.229
place:
Note: The above “GoDaddy” IP addresses resolve to
 CMCAgent.exe requires an inbound exception for TCP port crl.godaddy.com. Only one IP address is required at a site,
8089 to communicate with terminals. but the correct IP address depends on the site location. For
a group firewall policy that covers multiple sites, exceptions
 The File Transfer function requires inbound exceptions from should be added for the entire list. The most current list of
ports 58000 to 58099. IP addresses can be found at:

http://support.godaddy.com/help/article/6723/verifying-a-
certificates-validity-on-your-computer

Whitelisting
If you are using a whitelisting application, the following excep-
tions must be made for proper installation and operation:
 CMCInst.exe
 CMCAgent.exe
 CmcSvcWatcher.exe
 RadSprtA.exe
 Pvnc.exe

v07152014