Ports required by Avigilon Ava cameras connected to Alta Cloud Connectors

Last modified: Wednesday November 15, 2023.

Understand the incoming and outbound connections needed by Avigilon Ava cameras connected to Alta Cloud Connectors.

Avigilon Ava cameras have a single Ethernet interface on which different services can be enabled or disabled.

In addition, rules on your firewall device can be used to limit access to the Avigilon Ava camera, and from the Avigilon Ava camera to other systems. This could be done either for external locations, or to provide network separation within your network.

External connections

If upgrading from the Avigilon Ava camera user interface, the camera makes outbound connections to the Alta Cloud:

  • To TCP port 443 on *.aware.avasecurity.com
  • To TCP port 443 on *.alta.avigilon.com

To resolve names, the Avigilon Ava camera makes outbound connections to DNS as configured in the Alta Video user interface or provided over DHCP. The addresses and ports used for this depends on the configuration used.

Local connections to Avigilon Ava cameras

Outbound UDP connections from Avigilon Ava cameras

Table 1 – Outbound UDP connections

PortProtocolDescription
68DHCPDHCP client, used to connect to network DHCP server.

Inbound TCP connections to Avigilon Ava cameras

Table 2 – Inbound TCP connections

PortProtocolDescription
22 SSH/SCP*Used for retrieval of diagnostics and debugging. Encrypted, authentication via user credentials.
80 HTTP Redirects to HTTPS.
443 HTTPS Connection from Alta Cloud Connector, Web interface, Ava camera API, RTSP over HTTPS (tunneled media). Encrypted, authentication via user credentials

* By default, this port is open, but can be closed from within the Alta Video Cloud or Avigilon Ava camera user interfaces.

Inbound UDP connections to Avigilon Ava cameras

To aid with discovery of devices, Avigilon Ava cameras respond to Onvif and mDNS queries.

Table 3 – Inbound UDP connections

PortProtocolDescription
3702OnvifDevice discovery via Onvif protocol.
5353mDNSmDNS service for allowing device discovery.