Question:
What ports does Spitfire use?
What traffic do I need to allow through the firewall?
What hostnames should I whitelist?
Answer:
All ports listed are defaults.
IIS Server
- 80 – Inbound Web Traffic (internet/wan, but SSL recommended – see 443)
- 80 – Outbound connection to SSRS (normally local) and weather.gov forecast images
- 443 – Inbound HTTPS/SSL Encrypted Web Traffic (internet/wan)
- 443 – Outbound connection to SWS (Weather Services, Update Service, Exception Reporting)
- sws.spitfirepm.com
- r.spitfirepm.com
- w1.weather.gov
- api.weather.gov
- www.google-analytics.com
- timestamp.digicert.com
- 587 – Outbound connection to SMTP server with TLS
- 1433 – Outbound connection to SQL server (normally local)
- Legacy Email servers
- 25 – Outbound connection to SMTP server
- 110 – Outbound connection to POP3 server (normally local)
ATC Server (sometimes also located on IIS server)
- 80 – Outbound connection to sfPMS Web services (if not SSL)
- 443 – Outbound connection to various Web Services (including SWS)
- 587 – Outbound connection to SMTP server with TLS
- 995 – Outbound connection to POP server via POPS
- 1433 – Outbound connection to SQL server (normally local)
- 14491 – Inbound TCP connection from IIS server
- 14492 – Inbound .NET Remoting connection from IIS server (and optional agents)
Client Browsers
Traffic from web application users should all be on port 443. In addition to the IIS application server, the following Host Names are used:
Required
- ajax.googleapis.com – CDN
- r.spitfirepm.com – CDN
- kit.fontawesome.com – icons
- ka-p.fontawesome.com – fonts and icons
Encouraged
- www.googletagmanager.com – individual users can opt out, no default setting
- www.google-analytics.com – individual users can opt out, no default setting
- support.spitfirepm.com – help, videos, PDF files, etc
- sws.spitfirepm.com – help, videos, PDF files, etc
- weather.gov – weather thumbnail
KBA-01457; Last updated: May 15, 2025 at 14:55 pm;
Keywords: Port