Networking and connectivity details for the SendPro CX Series

Use these network requirements to prepare your IT and local network environment for connecting your SendPro CX Series device to the internet.

If you have extensive network security restrictions, your IT or network administrator may need these specifications to prepare for the installation.

• URL information
• Ports and communication requirements
• Advanced network requirements

URL Information

The URL hostnames must be accessible from the device, without any obstructions. This includes being free of any SSL packet inspection, web filtering devices or software monitoring. Unless indicated otherwise, these URLs apply to SendPro CX Series.

• The SendPro CX Series has certain URLs it must connect to for its basic operation. These are listed under “Required URLs”.

• There are further URLs the device will attempt to connect to that are for optional features. While we recommend you allow the machine to connect to these optional URLs, they can be blocked if necessary. These are listed under “Recommended URLs”.

• Finally, this device uses an Android operating system. The Android operating system may attempt to connect to additional unrequired URLs. If you notice the system attempting to access a URL not listed in this document, it is OK to block it on your firewall.
• Please note that any amazonaws.com URL below may be changed without notice.

Required URLs

• Distributor - main Pitney Bowes Server that authenticates machine for access to other Pitney Bowes web services.
  • https://distservp1.pb.com (Port 443)
• Funds (Funds Management & Refills) - funds are managed through a separate Funds Server.
  • https://comet2.ct.pb.com (Port 443)
  • https://cometservd1.pb.com (Port 443)
• Rates and Updates (Download Services) - Downloads new software, graphics, rate prices.
  • Main Download Services entry
    • https://dlsdlp1.pb.com (Port 443)
  •  Configuration updates
    • https://backup.horizon.pitneybowes.com (Port 443)
    • https://files.horizon.pitneybowes.com (Port 443)
  • OS Updates
    • https://fotana.redstoneota.com (Port 443)
• Manage Accounts (Accounting) - separate Pitney Bowes Server that manages accounting including account creation, reports etc.
  •  https://ms1app.pb.com
• Health Data - machine health Information.
  • a21iywh40b72eh-ats.iot.us-west-2.amazonaws.com (Port 443)
• Network Connectivity Test - used by tablet's Android O/S to confirm connectivity.
  • http://connectivitycheck.gstatic.com/ (Port 80)
  • https://networkcheck.horizon.pitneybowes.com (Port 443)

Recommended URLs

We recommend these URLs are left open, but if this presents a security issue, they can remain blocked. They are enabled by default.

• Shipping 360 - Support for shipping packages
  • sso2.sendpro360gov.pitneybowes.com (Port 443)
  • login2.pitneybowes.com (Port 443)
  • https://api.sendpro360.pitneybowes.com (Port 443)
  • https://ui-assets.sendpro360.pitneybowes.com (Port 443)
  • https://shippingdevices.sendpro360gov.pitneybowes.com (Port 443)
  • https://shippingdevices.pitneybowes.com (Port 443)
  • https://api.pitneybowes.com (Port 443)
  • https://pitneybowes.okta.com (Port 443)
  • http://microsoft.com (Port 80)
  • https://843911245900-sending-service-prd.s3.amazonaws.com (Port 443)
  • https://sendtech-api.pitneybowes.com (Port 443)

• Device Management
  • https://play.google.com (Port 443)
  • https://android.googleapis.com (Port 443)
  • https://firebaseinstallations.googleapis.com (Port 443)

• Device Help - On-device help information
  • https://pitneybowes.com (Port 443)
  • https://play.vidyard.com (Port 443)
  • https://eureka.pitneybowes.com (Port 443)

Support Remote Access

TeamViewer is an application that lets Pitney Bowes Service access your device remotely, when you authorize it. (A TeamViewer session can only be initiated by someone on your end, therefore the system cannot be accessed without your knowledge.)

There are two ways to unblock TeamViewer:

• General unblocking of Port 5938 TCP for outgoing connections (recommended).
• Unblocking URLs of the following formats (to any server) GET:
  • /din.aspx?s=…&client=DynGate…GET
  • /dout.aspx?s=…&client=DynGate…POST
  • /dout.aspx?s=…&client=DynGate…

Regardless of which method you choose to unblock TeamViewer, verify there are no content filters or anything similar blocking one of these URLs:

• *.TeamViewer.com
• *.dyngate.com

Communications

The SendPro CX Series connection uses these ports and protocols. The system will require access through your network and firewall therefore the below ports should be opened.

Port 80 (HTTP)

• Web Services

Port 443 (TLS 1.2)

• SendPro CX Series sends requests to refill or audit its PSD (Postal Security Device) when the user requests it or an inspection is required. Audits occur if the PSD inspection date has expired.
• Transaction records from the SendPro CX Series are automatically uploaded when a user message appears (within three days of the mail being generated).
• O/S updates and Pitney Bowes Application Software and Rates Data updates.

Port 53

• DNS lookup

Important: If your IT department uses a rules-based method for allowing specific ports to pass traffic on their network for port 53, you must allow both UDP and TCP traffic to this port.

Advanced Network Requirements

SendPro CX Series initiates all communication (via HTTP or TLS 1.2), so it can safely sit behind most corporate firewalls.

• High-speed network connection
• SendPro CX Series supports 802.11n WiFi WPA, WPA-2 PSK, WPA-802.1x (LEAP) protocols.
• Due to security issues, WEP Wireless Security Protocol is not supported.
• Both 2.4 and 5 GHz frequency band wireless is supported.
• SendPro CX Series communicates to external web services via HTTP over Port 80
• SendPro CX Series communicates to Pitney Bowes secure server(s) via TLS 1.2 over port 443
• SendPro CX Series uses Port 53 for DNS lookup
• Pitney Bowes requires a minimum network bandwidth of 384 kbps (upstream and downstream) to operate, but we recommend 1 Mbit/sec for best performance
• Pitney Bowes recommends that DSL or cellular devices are not shared across multiple SendPro CX Series systems
• Customer owned web filtering devices or software, as well as SSL packet inspection should be disabled for these ports as they can affect performance or could prevent functionality.
• Wireless Routers that support IPv6 are supported if IPv6 has been properly configured. Please ensure your network is configured correctly if this feature is enabled on your network.
• Wired Ethernet supports 10/100 Mbit speeds.

If you are unable to connect to the internet, ask your IT department or internet provider to check the internet settings before you contact Pitney Bowes.

Related topics

• Setting up a Proxy server
• Networking and connectivity Frequently Asked Questions