Configuring firewalls for unicast streaming

To configure a firewall for unicast streaming, you must open the ports on the firewall that are required for the connection protocols enabled on your server. If you are streaming content by using either the MMS or RTSP protocols, you need to support both the User Datagram Protocol (UDP) and Transmission Control Protocol (TCP).

To enable Windows Media Player and other clients to use the HTTP, RTSP, or MMS protocols to connect to a Windows Media server that is behind a firewall, open the following ports.

Ports	Description
In: TCP on port 80, 554, 1755	The Windows Media server uses the TCP In ports to accept an incoming HTTP connection (port 80), RTSP connection (port 554), or MMS connection (port 1755) from Windows Media Player and other clients.
In: UDP on port 1755, 5005	The Windows Media server uses UDP In port 1755 to receive resend requests from clients streaming by using MMSU and UDP In port 5005 to receive resend requests from clients streaming by using RTSPU.
Out: UDP between ports 1024-5000.	The Windows Media server uses UDP Out ports 1024-5000 to send data to Windows Media Player and other clients.

To enable a distribution server that is behind a firewall to use the HTTP or RTSP protocols to stream content from an origin server outside the firewall, open the following ports.

Ports	Description
In: UDP between ports 1024-5000	The Windows Media server uses UDP In ports 1024-5000 to receive data from another server.
Out: TCP on port 80, 554	The Windows Media server uses the TCP Out ports to establish an HTTP connection (port 80) or RTSP connection (port 554) to another server or encoder.
Out: UDP on port 5005	When RTSPU distribution is used, the Windows Media server uses UDP Out port 5005 to send resend requests to another server.

Note Image Note

If it is not possible to open all the UDP Out ports on a firewall, UDP packets sent by a Windows Media server may be blocked by the firewall and may not be able to reach the clients on the other side of the firewall. If this is the case, clients may still be able to receive a stream by automatically rolling over to a TCP-based protocol, such as HTTP or RTSPT. However, the rollover will cause a delay for the client receiving the stream. If you know you will not be able to support UDP streaming through a firewall, you can decrease the rollover delay by clearing the UDP check box in the Unicast Data Writer plug-in Properties dialog box. For more information, see To configure the WMS Unicast Data Writer plug-in.

Important Image Important

This content may have been updated. For the most recent information, see the Windows Media Services 9 Series Firewall Information Web page.

Configuring firewalls for unicast streaming

Related topics