# Network requirements for your IT

A Szenera player only makes outgoing connections: encrypted web traffic on port 443 to addresses ending in `szenera.com`, plus time synchronization. Nothing from the internet needs to reach it. Send this page to whoever manages your network.

> **Type:** reference
> **For:** IT administrators and everyone who sets up displays on a company or guest network
> **Prerequisite:** none
> **Where in the portal:** **Devices** › device › **Hardware** › **Network**

## What a player needs

| Purpose | Protocol and port | Destination |
|---|---|---|
| Content, commands, and status | HTTPS and secure WebSocket, TCP 443 | addresses ending in `szenera.com` |
| Images, videos, and app updates | HTTPS, TCP 443 | addresses ending in `szenera.com` |
| Time | NTP, UDP 123 | `0.de.pool.ntp.org` to `3.de.pool.ntp.org`, as a fallback `time.cloudflare.com`, `0.pool.ntp.org`, and `1.pool.ntp.org` |
| Network address and name lookup | DHCP and DNS | your local network |

We recommend one rule for `*.szenera.com` on TCP 443 instead of single addresses. Web displays and the Fire TV app need the same rule. They take the time from the device itself.

## What a player doesn't need

- **No incoming connections.** The player accepts no connections from the internet, so you don't need port forwarding or a public IP address. Remote maintenance runs over the connection the player opens itself.
- **No proxy server.** A player connects directly and has no proxy setting. It needs a direct route to the internet on port 443.
- **No TLS inspection.** Each player signs in with its own certificate. A firewall that decrypts and inspects HTTPS traffic breaks this, so exempt the players from inspection.

## Wi-Fi

A player connects to Wi-Fi with a password (WPA2 or WPA3 Personal) or to an open network. These don't work:

- guest Wi-Fi with a sign-in page in the browser, because nobody can type at the player
- company Wi-Fi with a personal login (WPA2 Enterprise or 802.1X)
- old networks with WEP encryption

A network cable avoids all of this and is the most reliable choice for a display that runs all day.

## A fixed IP address

A player gets its address by DHCP. If your IT wants to reserve a fixed address, it finds the **MAC** of the device in the portal under **Devices** › device › **Hardware** › **Network**, next to the current **IP address**.

## Related

- [Connect to the network: cable, Wi-Fi, company network, time](/devices/connect-network)
- [Which hardware do you need?](/devices/choose-hardware)
- [Web display: a display in the browser](/devices/web-display)