How to add Windows firewall exceptions from the command line to allow remote clients to connect

Solution

If you are using the Windows firewall to protect the video management server from outside attacks (which is recommended), certain ports must be opened to allow remote clients to connect.

Automate Adding Firewall Exceptions

To automate adding firewall exceptions (port based) from the command line:

netsh firewall add portopening TCP 50000 "Web Server Name" 

This command allows incoming connections from Port 50000 and will title the exception "Web Server Name".

To further automate a list of ports required for live and historical video, such as to open ports 50100, 50200, ... 51600, for AIRA 5.4 and Symphony 6.5 and newer, enter:

for %a in (01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16) do netsh firewall add portopening TCP 50%a0 "AI Tracker %a" && netsh firewall add portopening TCP 50%a2 "AI Historical %a"

Note: Older versions of Symphony used different port ranges. Please contact Senstar Support for more information if needed.

Other ports which require opening:

netsh firewall add portopening TCP 50001 "Web 2 Name" 

Other useful ports which can be opened for remote troubleshooting:

netsh firewall set portopening TCP 3389 "Remote Desktop" ENABLE 

Important: If you are using Video Wall functionality, open port 50005 on the client PC.