Firewall Ports

StifleR Ports

This page provides a detailed overview of the network ports required for the InterVLAN feature and related services. It outlines the specific client ports used by StifleR Client and BranchCache, including communication flow and directionality.

Refer to the tables below for the full list of ports, usage descriptions, and whether they require explicit allowance in your firewall configuration.

Additionally you can review BranchCache Distributed Cache Mode for Firewall Ports needed for BranchCache communications.

Stifler Service Local Firewall Port openings required - Outgoing

Name	Description	Local Address	Remote Address	Local Port	Remote Port	Protocol	Customizable
StifleR Service	Global catalog LDAP	Any	for Domain accounts usage	3268	3268	TCP	No
Stifler Service	https	Any	Connection for the dashboard	443	443	TCP	No
Stifler Service	SQL Server Service Broker	Any	only if SQL is enabled	4022	4022	TCP	Yes
Stifler Service	SQL Server service	Any	only if SQL is enabled	1433	1433	UDP	Yes

Stifler Client Local Firewall Port openings required - Incoming

Name	Executable	Local Address	Remote Address	Local Port	Remote Port	Protocol	Customizable
Blue Leader Data From Remote Peer	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	1337	Any	TCP	Yes
Green Leader Peer Data	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	1337, 1339	Any	TCP	Yes
Blue Leader Peer Data	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	1338	Any	TCP	Yes
Peer Probes	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	3702	Any	UDP	Yes
Blue Leader Peer Probe Match	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	Any	3702	UDP	Yes
mDNS	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	5353	Any	UDP	Yes
Stifler Service	Stifler Client	Any	Any	1414	Any	TCP

Stifler Client Local Firewall Port openings required - Outgoing

Name	Executable	Local Address	Remote Address	Local Port	Remote Port	Protocol	Customizable
Beacon - iPerf packets		Any	Stifler Beacons	Any	5201	UDP	Yes
Beacon - FastPing		Any	Stifler Beacons	Any	5200	TCP	Yes
Blue Leader Data to requesting Peer	SYSTEM	Any	Any	Any	1338	TCP	Yes
Blue Leader Data From Remote Peer	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	1337	Any	TCP	Yes
Green Leader Peer Data	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	Any	1337.1339	TCP	Yes
Blue Leader Peer Data	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	Any	1338	TCP	Yes
Peer Probes	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Local Subnet	3702	Any	UDP	Yes
Blue Leader Peer Probe Match	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	Any	3702	UDP	No
Blue Leader Probe Port	TwoPint.PeerDist.BlueGreenLeader.exe	Any	Any	3703	3703	UDP	Yes
mDNS	TwoPint.PeerDist.BlueGreenLeader.exe			Any	5353	UDP
Access to Stifler Service	Stifler.Client.exe	Any	Any or Stifler server	Any	1414	UDP	No
Access to Stifler Service	Stifler.Client.exe	Any	Any or Stifler server	Any	1414	TCP	No
Access to Stifler Service	Twopint.remotetools.host.exe	Any	Any or Stifler server + Action hubs	Any	1415	UDP	No
Access to Stifler Service	Twopint.remotetools.host.exe	Any	server + Action hubs	Any	1415	TCP	No
Access to Stifler Service	Browser	Any	Stifler Server	Any	9000	TCP	No
Access to Stifler Service	Browser	Any	Any or Stifler server	Any	1414	TCP	No
Access to Stifler Service	Browser	Any	Any or Stifler server + Action hubs	Any	1415	TCP	No

BranchCache Local Firewall Port openings required - Incoming

Name	Executable	Local Address	Remote Address	Local Port	Remote Port	Protocol	Customizable
BranchCache Content Retrieval (HTTP-In)	SYSTEM	Any	Any	1337	Any	TCP	Yes
BranchCache Hosted Cache Server (HTTP-In)	SYSTEM	Any	Any	1339.443	Any	TCP	Yes
BranchCache Peer Discovery (WSD-In)	%SYSTEMROOT%\system32\svchost.exe	Any	Local Subnet	3702	Any	TCP	No

BranchCache Local Firewall Port openings required - Outgoing

Name	Executable	Local Address	Remote Address	Local Port	Remote Port	Protocol	Customizable
BranchCache Content Retrieval (HTTP-Out)	SYSTEM	Any	Any	Any	1337	TCP	Yes
BranchCache Hosted Cache Client (HTTP-Out)	SYSTEM	Any	Any	Any	1339.443	TCP	Yes
BranchCache Hosted Cache Server(HTTP-Out)	SYSTEM	Any	Any	1339.443	Any	TCP	Yes
BranchCache Peer Discovery (WSD-Out)	%SYSTEMROOT%\system32\svchost.exe	Any	Local Subnet	Any	3702	UDP	No