User Guide: AMF Security version 2.6.1 for VST-VRT

# TCP or UDP port used by AMF Security

AMF Security uses the following port numbers internally. Make sure that those port numbers are not used by any other processes.

## Ports AMF Security listens on

Services provided by AMF Security listen on the following ports. Listening ports can be changed for some services. But before changing them, make sure that each service port is not used by any other service.

Table 1: Listening port numbers of AMF Security services
Service Name | Port Number | Note
--- | --- | ---
Web GUI | HTTP | 80/TCP* | * Can be changed.
HTTPS | 443/TCP* | * Can be changed.
HTTP redirect service | HTTP | 80/TCP |
AMF Application Proxy Blacklist (TQ) Site Content for Redirect-URL Action | HTTP | 8000/TCP * | * Can be changed.
Internal DNS server | 53/TCP 53/UDP |
Local network name resolution service | 5355/TCP 5355/UDP |
Trap Monitor | Syslog | 514/UDP* 514/TCP* | * Can be changed. Common settings for UDP and TCP.
SNMP Trap | 162/UDP* | * Can be changed.
OpenFlow Controller | 6653/TCP* | * Can be changed.
AMF Application Proxy Whitelist (AW+) | 1812/UDP 2083/TCP |
AMF Application Proxy Whitelist / Blacklist (TQ) | 1812/UDP |
Local Log Management | 9999/UDP |
Authentication Database Management | 27017/TCP |

## Packets AMF Security transmits

Services provided by AMF Security may transmit packets to the following destinations. If there are intermediate devices such as firewalls, they should be properly configured to allow those packets.

Table 2: Packets transmitted by AMF Security services
Feature | Destination | Port Number | Note
--- | --- | --- | ---
Syslog Transmission | Configured Host | 514/UDP* | * Default port number used if not specified.
Trap Monitor Forwarding | Syslog | Configured Host | 514/UDP* | * Default port number used if not specified.
SNMP | Configured Host | 162/UDP* | * Default port number used if not specified.
AMF Application Proxy Whitelist (AW+) | Acquisition of node information | AMF Master | 443/TCP |
AMF Application Proxy Blacklist (AW+) | Action Registration | AMF Master | 443/TCP |
State Retrieval | AMF Master | 12943/TCP |
AMF Application Proxy Whitelist (TQ) | TQ | 1812/UDP |
AMF Application Proxy Blacklist (TQ) | TQ | 3799/UDP |
AT-Vista Manager EX (AWC Plug-in) | Configured TCP port* | * 5443 by default
Email Notification | Configured Host | Configured TCP port |
DNS communication | Specified DNS server* | 53/UDP | * DNS server set in "Application Settings" of "AMF Security" on AT-VST-VRT.

01 Oct 2025 12:50