Port requirements for direct-to-cloud cameras

2026-08-10

To enable direct-to-cloud (D2C) cameras to communicate with Security Center SaaS, you must configure firewall access by allowing the required outbound ports and service endpoints for your Security Center SaaS region.

US data centers

The following network ports must be open for systems hosted in US data centers.


Outbound port	Endpoint domain	Manufacturer	Port usage
UDP 53	Any endpoint domain	All	Connection to a DNS server.
TCP 443	Recommended `.genetec.cloud .genetec.com` Current service endpoints `login.genetec.com eastus2.video.genetec.cloud eastus2.tds.genetec.cloud` Current service static IPs `208.88.71.3 208.88.71.4 20.157.76.128/28`	All	Connection for authenticating and managing cameras.
TCP 554 TCP 1935	Recommended `.genetec.cloud` Current service endpoint* `rtsp.eastus2.video.genetec.cloud` Current service static IPs `20.157.76.128/28`	Video	Connection for RTSP streaming over TLS and ICE TCP in WebRTC for live streaming.
TCP 443	eus2scsaas01.blob.core.windows.net eus2scsaas02.blob.core.windows.net eus2scsaas03.blob.core.windows.net eus2scsaas04.blob.core.windows.net eus2scsaas05.blob.core.windows.net eus2scsaas06.blob.core.windows.net eus2scsaas07.blob.core.windows.net eus2scsaas08.blob.core.windows.net eus2scsaas09.blob.core.windows.net eus2scsaas10.blob.core.windows.net eus2scsaas11.blob.core.windows.net eus2scsaas12.blob.core.windows.net eus2scsaas13.blob.core.windows.net eus2scsaas14.blob.core.windows.net eus2scsaas15.blob.core.windows.net eus2scsaas16.blob.core.windows.net	All	Endpoints for video recording and video playback that support load balancing and resiliency.
TCP 1935	Recommended `.gsc-cloud.com` Current service endpoint* `{GenetecReference}.gsc-cloud.com` You can obtain your Genetec reference from your Genetec channel partner. The reference format is SCC followed by 12 digits, for example: SCC‑232136‑654353.	All	Interactive Connectivity Establishment (ICE) TCP in Web Real-Time Communication (WebRTC) for live streaming.
UDP 3478 TCP 3478 UDP 443 TCP 443 UDP 80 TCP 80 UDP 20000-60000	`turn.video.geneteccloud.com stun.relay.metered.ca global.relay.metered.ca` See the complete list of IP addresses.	All	Traversal Using Relays around NAT (TURN) server and Session Traversal Utilities for NAT (STUN) servers for live WebRTC video streaming.
UDP 123	`pool.ntp.org`	Axis	Connection to an NTP server.
TCP 443	Recommended `.connect.axis.com -st.axis.com s3-ats-migration-test.s3.eu-west-3.amazonaws.com` Current service endpoints `cep.otelcol.connect.axis.com eu.prod.otelcol.connect.axis.com appinsights.connect.axis.com signaling.prod.webrtc.connect.axis.com onboardme.prod.oneclick.connect.axis.com dispatchus1-st.axis.com dispatchse1-st.axis.com dispatchse2-st.axis.com dispatchjp1-st.axis.com dispatcher-st.axis.com`	Axis	Connection for managing Axis cameras in Security Center SaaS.
TCP 42000	`dm201.cbs.boschsecurity.com dm443.cbs.boschsecurity.com dm161.cbs.boschsecurity.com dm144.cbs.boschsecurity.com`	Bosch	Connection to the cloud.
TCP 443	`api.remote.boschsecurity.com`	Bosch	Connection to remote portal.
TCP 80	`http://36.mcg.escrypt.com/crl`	Bosch	Certificate Revocation List (CRL).

Canadian data centers

The following network ports must be open for systems hosted in Canadian data centers.


Outbound port	Endpoint domain	Manufacturer	Port usage
UDP 53	{AnyEndpointDomain}	All	Connection to a DNS server.
TCP 443	Recommended `.genetec.cloud .genetec.com` Current service endpoints `login.genetec.com centralca.video.genetec.cloud cancentral.tds.genetec.cloud` Current service static IPs `208.88.71.3 208.88.71.4 20.157.121.64/28`	All	Connection for authenticating and managing cameras.
TCP 554 TCP 1935	Recommended `.genetec.cloud` Current service endpoint* `rtsp.centralca.video.genetec.cloud` Current service static IPs `20.157.121.64/28`	Video	Connection for RTSP streaming over TLS and ICE TCP in WebRTC for live streaming.
TCP 443	cacscsaas01.blob.core.windows.net cacscsaas02.blob.core.windows.net cacscsaas03.blob.core.windows.net cacscsaas04.blob.core.windows.net cacscsaas05.blob.core.windows.net cacscsaas06.blob.core.windows.net cacscsaas07.blob.core.windows.net cacscsaas08.blob.core.windows.net cacscsaas09.blob.core.windows.net cacscsaas10.blob.core.windows.net cacscsaas11.blob.core.windows.net cacscsaas12.blob.core.windows.net cacscsaas13.blob.core.windows.net cacscsaas14.blob.core.windows.net cacscsaas15.blob.core.windows.net cacscsaas16.blob.core.windows.net	All	Endpoints for video recording and video playback that support load balancing and resiliency.
TCP 1935	Recommended `.gsc-cloud.com` Current service endpoint* `{GenetecReference}.gsc-cloud.com` You can obtain your Genetec reference from your Genetec channel partner. The reference format is SCC followed by 12 digits, for example: SCC‑232136‑654353.	All	Interactive Connectivity Establishment (ICE) TCP in Web Real-Time Communication (WebRTC) for live streaming.
UDP 3478 TCP 3478 UDP 443 TCP 443 UDP 80 TCP 80 UDP 20000-60000	`turn.video.geneteccloud.com stun.relay.metered.ca global.relay.metered.ca` See the complete list of IP addresses.	All	Traversal Using Relays around NAT (TURN) server and Session Traversal Utilities for NAT (STUN) servers for live WebRTC video streaming.
UDP 123	`pool.ntp.org`	Axis	Connection to an NTP server.
TCP 443	Recommended `.connect.axis.com -st.axis.com s3-ats-migration-test.s3.eu-west-3.amazonaws.com` Current service endpoints `cep.otelcol.connect.axis.com eu.prod.otelcol.connect.axis.com appinsights.connect.axis.com signaling.prod.webrtc.connect.axis.com onboardme.prod.oneclick.connect.axis.com dispatchus1-st.axis.com dispatchse1-st.axis.com dispatchse2-st.axis.com dispatchjp1-st.axis.com dispatcher-st.axis.com`	Axis	Connection for managing Axis cameras in Security Center SaaS.
TCP 42000	`dm201.cbs.boschsecurity.com dm443.cbs.boschsecurity.com dm161.cbs.boschsecurity.com dm144.cbs.boschsecurity.com`	Bosch	Connection to the cloud.
TCP 443	`api.remote.boschsecurity.com`	Bosch	Connection to remote portal.
TCP 80	`http://36.mcg.escrypt.com/crl`	Bosch	Certificate Revocation List (CRL).

Australian data centers

The following network ports must be open for systems hosted in Australian data centers.


Outbound port	Endpoint domain	Manufacturer	Port usage
UDP 53	Any endpoint domain	All	Connection to a DNS server.
TCP 443	Recommended `.genetec.cloud .genetec.com` Current service endpoints `login.genetec.com eastau.video.genetec.cloud australiaeast.tds.genetec.cloud` Current service static IPs `208.88.71.3 208.88.71.4 20.47.123.48/28`	All	Connection for authenticating and managing cameras.
TCP 554 TCP 1935	Recommended `.genetec.cloud` Current service endpoint* `rtsp.eastau.video.genetec.cloud` Current service static IPs `20.47.123.48/28`	Video	Connection for RTSP streaming over TLS and ICE TCP in WebRTC for live streaming.
TCP 443	auescsaas01.blob.core.windows.net auescsaas02.blob.core.windows.net auescsaas03.blob.core.windows.net auescsaas04.blob.core.windows.net auescsaas05.blob.core.windows.net auescsaas06.blob.core.windows.net auescsaas07.blob.core.windows.net auescsaas08.blob.core.windows.net auescsaas09.blob.core.windows.net auescsaas10.blob.core.windows.net auescsaas11.blob.core.windows.net auescsaas12.blob.core.windows.net auescsaas13.blob.core.windows.net auescsaas14.blob.core.windows.net auescsaas15.blob.core.windows.net auescsaas16.blob.core.windows.net	All	Endpoints for video recording and video playback that support load balancing and resiliency.
TCP 1935	Recommended `.gsc-cloud.com` Current service endpoint* `{GenetecReference}.gsc-cloud.com` You can obtain your Genetec reference from your Genetec channel partner. The reference format is SCC followed by 12 digits, for example: SCC‑232136‑654353.		All
UDP 3478 TCP 3478 UDP 443 TCP 443 UDP 80 TCP 80 UDP 20000-60000	`turn.video.geneteccloud.com stun.relay.metered.ca global.relay.metered.ca` See the complete list of IP addresses.	All	Traversal Using Relays around NAT (TURN) server and Session Traversal Utilities for NAT (STUN) servers for live WebRTC video streaming.
UDP 123	`pool.ntp.org`	Axis	Connection to an NTP server.
TCP 443	Recommended `.connect.axis.com -st.axis.com s3-ats-migration-test.s3.eu-west-3.amazonaws.com` Current service endpoints `cep.otelcol.connect.axis.com eu.prod.otelcol.connect.axis.com appinsights.connect.axis.com signaling.prod.webrtc.connect.axis.com onboardme.prod.oneclick.connect.axis.com dispatchus1-st.axis.com dispatchse1-st.axis.com dispatchse2-st.axis.com dispatchjp1-st.axis.com dispatcher-st.axis.com`	Axis	Connection for managing Axis cameras in Security Center SaaS.
TCP 42000	`dm201.cbs.boschsecurity.com dm443.cbs.boschsecurity.com dm261.cbs.boschsecurity.com`	Bosch	Connection to the cloud.
TCP 443	`api.remote.boschsecurity.com`	Bosch	Connection to remote portal.
TCP 80	`http://36.mcg.escrypt.com/crl`	Bosch	Certificate Revocation List (CRL).

European data centers

The following network ports must be open for systems hosted in European data centers.


Outbound port	Endpoint domain	Manufacturer	Port usage
UDP 53	Any endpoint domain	All	Connection to a DNS server.
TCP 443	Recommended `.genetec.cloud .genetec.com` Current service endpoints `login.genetec.com westeu.video.genetec.cloud westeurope.tds.genetec.cloud` Current service static IPs `208.88.71.3 208.88.71.4 20.157.123.144/28`	All	Connection for authenticating and managing cameras.
TCP 554 TCP 1935	Recommended `.genetec.cloud` Current service endpoint* `rtsp.westeu.video.genetec.cloud` Current service static IPs `20.157.123.144/28`	Video	Connection for RTSP streaming over TLS and ICE TCP in WebRTC for live streaming.
TCP 443	weuscsaas01.blob.core.windows.net weuscsaas02.blob.core.windows.net weuscsaas03.blob.core.windows.net weuscsaas04.blob.core.windows.net weuscsaas05.blob.core.windows.net weuscsaas06.blob.core.windows.net weuscsaas07.blob.core.windows.net weuscsaas08.blob.core.windows.net weuscsaas09.blob.core.windows.net weuscsaas10.blob.core.windows.net weuscsaas11.blob.core.windows.net weuscsaas12.blob.core.windows.net weuscsaas13.blob.core.windows.net weuscsaas14.blob.core.windows.net weuscsaas15.blob.core.windows.net weuscsaas16.blob.core.windows.net	All	Endpoints for video recording and video playback that support load balancing and resiliency.
TCP 1935	Recommended `.gsc-cloud.com` Current service endpoint* `{GenetecReference}.gsc-cloud.com` You can obtain your Genetec reference from your Genetec channel partner. The reference format is SCC followed by 12 digits, for example: SCC‑232136‑654353.	All	Interactive Connectivity Establishment (ICE) TCP in Web Real-Time Communication (WebRTC) for live streaming.
UDP 3478 TCP 3478 UDP 443 TCP 443 UDP 80 TCP 80 UDP 20000-60000	`turn.video.geneteccloud.com stun.relay.metered.ca global.relay.metered.ca` See the complete list of IP addresses.	All	Traversal Using Relays around NAT (TURN) server and Session Traversal Utilities for NAT (STUN) servers for live WebRTC video streaming.
UDP 123	`pool.ntp.org`	Axis	Connection to an NTP server.
TCP 443	Recommended `.connect.axis.com -st.axis.com s3-ats-migration-test.s3.eu-west-3.amazonaws.com` Current service endpoints `cep.otelcol.connect.axis.com eu.prod.otelcol.connect.axis.com appinsights.connect.axis.com signaling.prod.webrtc.connect.axis.com onboardme.prod.oneclick.connect.axis.com dispatchus1-st.axis.com dispatchse1-st.axis.com dispatchse2-st.axis.com dispatchjp1-st.axis.com dispatcher-st.axis.com`	Axis	Connection for managing Axis cameras in Security Center SaaS.
TCP 42000	`dm201.cbs.boschsecurity.com dm443.cbs.boschsecurity.com dm35.cbs.boschsecurity.com dm44.cbs.boschsecurity.com`	Bosch	Connection to the cloud.
TCP 443	`api.remote.boschsecurity.com`	Bosch	Connection to remote portal.
TCP 80	`http://36.mcg.escrypt.com/crl`	Bosch	Certificate Revocation List (CRL).

UK data centers

The following network ports must be open for systems hosted in UK data centers.


Outbound port	Endpoint domain	Manufacturer	Port usage
UDP 53	Any endpoint domain	All	Connection to a DNS server.
TCP 443	Recommended `.genetec.cloud .genetec.com` Current service endpoints `login.genetec.com southuk.video.genetec.cloud southuk.tds.genetec.cloud` Current service static IPs `208.88.71.3 208.88.71.4 20.47.68.192/28`	All	Connection for authenticating and managing cameras.
TCP 554 TCP 1935	Recommended `.genetec.cloud` Current service endpoint* `rtsp.southuk.video.genetec.cloud` Current service static IPs `20.47.68.192/28`	Video	Connection for RTSP streaming over TLS and ICE TCP in WebRTC for live streaming.
TCP 443	sukscsaas01.blob.core.windows.net sukscsaas02.blob.core.windows.net sukscsaas03.blob.core.windows.net sukscsaas04.blob.core.windows.net sukscsaas05.blob.core.windows.net sukscsaas06.blob.core.windows.net sukscsaas07.blob.core.windows.net sukscsaas08.blob.core.windows.net sukscsaas09.blob.core.windows.net sukscsaas10.blob.core.windows.net sukscsaas11.blob.core.windows.net sukscsaas12.blob.core.windows.net sukscsaas13.blob.core.windows.net sukscsaas14.blob.core.windows.net sukscsaas15.blob.core.windows.net sukscsaas16.blob.core.windows.net	All	Endpoints for video recording and video playback that support load balancing and resiliency.
TCP 1935	Recommended `.gsc-cloud.com` Current service endpoint* `{GenetecReference}.gsc-cloud.com` You can obtain your Genetec reference from your Genetec channel partner. The reference format is SCC followed by 12 digits, for example: SCC‑232136‑654353.	All	Interactive Connectivity Establishment (ICE) TCP in Web Real-Time Communication (WebRTC) for live streaming.
UDP 3478 TCP 3478 UDP 443 TCP 443 UDP 80 TCP 80 UDP 20000-60000	`turn.video.geneteccloud.com stun.relay.metered.ca global.relay.metered.ca` See the complete list of IP addresses.	All	Traversal Using Relays around NAT (TURN) server and Session Traversal Utilities for NAT (STUN) servers for live WebRTC video streaming.
UDP 123	`pool.ntp.org`	Axis	Connection to an NTP server.
TCP 443	Recommended `.connect.axis.com -st.axis.com s3-ats-migration-test.s3.eu-west-3.amazonaws.com` Current service endpoints `cep.otelcol.connect.axis.com eu.prod.otelcol.connect.axis.com appinsights.connect.axis.com signaling.prod.webrtc.connect.axis.com onboardme.prod.oneclick.connect.axis.com dispatchus1-st.axis.com dispatchse1-st.axis.com dispatchse2-st.axis.com dispatchjp1-st.axis.com dispatcher-st.axis.com`	Axis	Connection for managing Axis cameras in Security Center SaaS.
TCP 42000	`dm201.cbs.boschsecurity.com dm443.cbs.boschsecurity.com dm35.cbs.boschsecurity.com dm44.cbs.boschsecurity.com`	Bosch	Connection to the cloud.
TCP 443	`api.remote.boschsecurity.com`	Bosch	Connection to remote portal.
TCP 80	`http://36.mcg.escrypt.com/crl`	Bosch	Certificate Revocation List (CRL).