Network and firewall
The ports PrintSentinel uses between the server, the printers, client PCs and the internet.
Only the server PC talks to the printers. Allow these through your firewalls and the site-to-site VPN:
| From | To | Port |
|---|---|---|
| Server PC | Every printer, at head office and branches | UDP 161 (SNMP) |
| Client PCs and browsers | Server PC | TCP 47631 (HTTPS) |
| PCs with the Print Agent | Server PC | TCP 47631 (HTTPS) |
| Server PC | Microsoft Teams, your mail server | TCP 443, TCP 587 |
| Server PC | printsentinel.app (licence, updates and prices) | TCP 443 |
| Your monitoring tool (optional) | Server PC | TCP 47631 (HTTPS) |
Printers’ own web pages (TCP 80 or 443) only need to be reachable from PCs that use the Web console button. To limit the firewall rule the service creates to your office and VPN ranges, in an administrator PowerShell:
Set-NetFirewallRule -Group PrintSentinel -RemoteAddress 10.20.0.0/16Without the internet
Monitoring, desktop pop-ups, client PCs and reports all work on your own network. A paid licence keeps working for about 44 days without reaching printsentinel.app, and warns well before then. Email and Teams alerts need a route to your mail server and to Microsoft.