Skip to Content

Using a Control4 System Behind a Firewall

August 17, 2026 by
Using a Control4 System Behind a Firewall
Tabita Castro

This article details the ports used by Control4, so a system administrator can open the ports for the Control4 system to be contacted remotely.

❌  Do not port forward inbound traffic through your router or firewall.


💡 All communication is initiated by the Control4 Controller and sent outbound to Control4 Servers. There is no need to alter your firewall to allow for inbound traffic.


If you need more information around IP addresses and domains being addressed, check our article Which Network Ports & Hosts Does a Control4 System Use?


Required IP Address to Allow Traffic From

Internal IP address of your main Control4 Controller (Director)


Required Outbound Ports

ApplicationPort NumberProtocol
RA Proxy25021TCP
SIP Server 15080TCP & UDP
SIP Server 25081TCP
Turn Balancer3478TCP
Turn Server 15000TCP
Turn Server 25001TCP
Turn Server 320000 - 60000TCP
Director Media Streaming 15070TCP
Direction Media Streaming 230000 - 50000UDP
C4 API 18443TCP
C4 API 29443TCP
Director 443443TCP
Director 8080TCP
Director Data Upload22TCP
DNS53 TCP & UDP

💡

Ports for DNS are needed to resolve FQDN hostnames. An internal DNS server can be used instead if it can properly resolve the hostnames of the Control4 Servers.