---
title: Manage Firewall Rules
slug: bhdo-v1/manage-firewall-rules
createdAt: 2023-07-24T15:44:25.732Z
---

:::hint{type="info"}
**Note**: This feature is available for Belden Horizon Data Operations version 3.7.0 and later. 
:::

You can manage firewall rules to open specific ports or port ranges for inbound communication by navigating to **System **> **Network **and clicking the **Firewall **tab. 

:::hint{type="info"}
**Note**: These firewall rules apply only to IPv4 traffic. 
:::

The **Firewall **pane allows you to do the following:

- Review what ports are being used by Belden Horizon Data Operations system components, applications, and containers. 
- Ensure that any DeviceHub drivers and Docker container applications are not running on conflicting ports. 
- Open ports and port ranges with appropriate protocol (TCP/UDP) for Docker applications, containers, and DeviceHub drivers.
- Manage and close ports as needed. 

You can review any firewall changes in **System **> **Events**. 

The pane shows a summary of what ports are currently open. 

::Image[]{src="https://api.archbee.com/api/optimize/vAqK-046vdh4I0e1y9cfX/dVi_G3BPRiqgdfjpBc2zV_image.png" size="80" width="1209" height="507" position="center" caption="The Firewall pane" showCaption="true"}

# List of Reserved Ports

There are some ports that cannot be used for firewall rules because they are reserved for system services. 

Review the list of reserved ports. 

| **Reserved Port or Port Range** | **System Service that Uses Port(s)**            |
| ------------------------------- | ----------------------------------------------- |
| 21                              | FTP                                             |
| 22                              | SSH                                             |
| 80                              | HTTP                                            |
| 123                             | NTP                                             |
| 389                             | LDAP                                            |
| 443                             | Belden Horizon Data Manager API                 |
| 636                             | LDAP with SSL                                   |
| 1880                            | Belden Horizon Data Operations UI REST endpoint |
| 2121                            | FTP                                             |
| 4840                            | OPC UA                                          |
| 5353                            | mDNS                                            |
| 5355                            | LLMNR                                           |
| 8081-8199                       | REST API endpoints                              |
| 9081-9199                       | gRPC API endpoints                              |
| 8883                            | MQTT to Belden Horizon Data Manager             |
| 51280                           | Belden Horizon Data Manager Remote Access       |

# Add Firewall Rule

**To add a firewall rule:**

1. From the *Network *> *Firewall *pane, click **Add Rule**. 
   The* Add Inbound Rule* dialog displays. 
2. In the **Port or Port Range** field, enter a single port number or a range of port numbers separated by a hyphen (-). 

   ::Image[]{src="https://api.archbee.com/api/optimize/vAqK-046vdh4I0e1y9cfX/Q5-eIt-wV_rCGkqvGehFT_bhdoadd-inbound-rule.png" size="60" width="494" height="428" position="center" caption="Port/Port range field" showCaption="true"}
3. In the **Protocol **field, select either **TCP **(transmission control protocol) or **UDP **(user datagram protocol). 

   ::Image[]{src="https://api.archbee.com/api/optimize/vAqK-046vdh4I0e1y9cfX/Ysj1fBlFp_cfkV24BaSAW_bhdoprotocol.png" size="60" width="494" height="428" position="center" showCaption="false"}
4. Click **Add**. 
   The new rule displays on the pane. 

# Manage Port Rules

To manage port rules, click the **Action menu **for a rule. 

::Image[]{src="https://api.archbee.com/api/optimize/vAqK-046vdh4I0e1y9cfX/A90XTUbL_Jv7mQEIFbmcW_image.png" size="80" width="1209" height="506" position="center" caption="Firewall rule action menu" showCaption="true"}

- **Edit**: Update the rule. 
- **Delete**: Remove the rule and close the port or port range.