Network requirements for your IT
Your displays go on a company or guest network, and your IT needs to know what to allow.
- For
- IT administrators and everyone who sets up displays on a company or guest network
- Prerequisite
- none
- Where in the portal
- Devices › device › Hardware › Network
On this page
A Szenera player only makes outgoing connections: encrypted web traffic on port 443 to addresses ending in szenera.com, plus time synchronization. Nothing from the internet needs to reach it. Send this page to whoever manages your network.
What a player needs
| Purpose | Protocol and port | Destination |
|---|---|---|
| Content, commands, and status | HTTPS and secure WebSocket, TCP 443 | addresses ending in szenera.com |
| Images, videos, and app updates | HTTPS, TCP 443 | addresses ending in szenera.com |
| Time | NTP, UDP 123 | 0.de.pool.ntp.org to 3.de.pool.ntp.org, as a fallback time.cloudflare.com, 0.pool.ntp.org, and 1.pool.ntp.org |
| Network address and name lookup | DHCP and DNS | your local network |
We recommend one rule for *.szenera.com on TCP 443 instead of single addresses. Web displays and the Fire TV app need the same rule. They take the time from the device itself.
What a player doesn't need
- No incoming connections. The player accepts no connections from the internet, so you don't need port forwarding or a public IP address. Remote maintenance runs over the connection the player opens itself.
- No proxy server. A player connects directly and has no proxy setting. It needs a direct route to the internet on port 443.
- No TLS inspection. Each player signs in with its own certificate. A firewall that decrypts and inspects HTTPS traffic breaks this, so exempt the players from inspection.
Wi-Fi
A player connects to Wi-Fi with a password (WPA2 or WPA3 Personal) or to an open network. These don't work:
- guest Wi-Fi with a sign-in page in the browser, because nobody can type at the player
- company Wi-Fi with a personal login (WPA2 Enterprise or 802.1X)
- old networks with WEP encryption
A network cable avoids all of this and is the most reliable choice for a display that runs all day.
A fixed IP address
A player gets its address by DHCP. If your IT wants to reserve a fixed address, it finds the MAC of the device in the portal under Devices › device › Hardware › Network, next to the current IP address.
Related
Was this helpful?