Tools

What are the port requirements in Serv-U?

This article is a general information about port numbers that are required to be open in Firewall/Router for Serv-U to work properly.

First published date

10/14/2019 2:54 AM

Last published date

6/30/2022 2:20 PM

Overview


Port requirements for Serv-U will depend on the deployment the administrator wishes to have.

Here are some items to consider when figuring out what ports to open.
  • What protocols are allowed to be processed in Serv-U
  • If there is a Serv-U Gateway server in the deployment
  • If FTPS (explicit or implicit) connection is used
  • If Active Directory authentication is used
  • If SMTP is utilized

Product section

Serv-U Managed File Transfer & Serv-U FTP Server

Resolution


To confirm what protocols or connections are allowed in Serv-U:
  • Launch the Management Console and go to Domains > Domain Details > Listeners tab
  • Take note of what ports are enabled. The default ports supported are 21, 22, 80, 443 and 990

For deployments with Serv-U Gateway:
  • Port 1180 should be open in the Gateway server.
  • The Serv-U MFT communicates with the Gateway server through port 1180
  • The protocol ports (21, 22, 80, 443 or 990) should be open in the Gateway firewall facing the outside network.
  • The protocol ports are not required to be open inside the Serv-U MFT server.
  • The Gateway application will be accepting the connection requests from the outside network through ports (21, 22, 80, 443 or 990) and the transaction will be forwarded to the Serv-U MFT Gateway through port 1180.

If the FTPS (explicit or implicit) connection is used:
  • The Passive Port range should be allowed for inbound and outbound connections in the external firewall
  • To confirm the Passive Port range used by Serv-U, launch the Management Console > go to Global > Limits & Settings > Settings tab
  • Scroll down and look at the Network Settings panel and look at the PASV Port Range field.
  • The suggested range by SolarWinds is from 50000-50009 but the Serv-U administrator can change this. The passive port range is only limited to 49 ports.

If Active Directory authentication is used:
  • Allow the default active directory port of 389 in the Serv-U MFT server.
  • For Secure LDAP, use port 636.

If SMTP is utilized:
  • Allow port 25 (which is the default exchange SMTP port).
  • If a different mail service is used, take note of the SMTP port and allow it in the server.