| 19RADVISION | RADVISION Port Security Reference GuidePathfinder ClientNote: You cannot have a firewall between the H.323 endpoint (or other H.323 entity) and the SCOPIAPathFinder Client (see Figure 1-1 on page 15). If there is a firewall, you must open all the highports in both directions (1025-65535).Table 1-11 lists the outbound ports supported by SCOPIA PathFinder Client, when the clientconnects to the SCOPIA PathFinder Server.3089 UDP Neighbor servermedia connectionSCOPIAPathFinderServer toSCOPIAPathFinderClientCannot traverse media toneighbor server using UDP.PathFinder Server4000-5000(configurewithin thisrange)TCP, UDP Direct PublicAccess for H.323call media,signaling and callcontrolSCOPIAPathFinderServer to H.323entityCannot setup/connect DPAmode calls with externalSCOPIA PathFinder Server.The approximate number ofports required is thenumber of simultaneousDPA calls multipled by 10.The multiplication factor islower for audio-only calls,higher for calls with dualvideo. We recommend using10 as an approximation.To configure the port rangeon the SCOPIA PathFinderServer:1. Select Settings >General.2. Enable H.323 DirectAccess.Enter the Port Rangenumbers.Any H.323 entityusing a Q.931signaling in DPAmode.The recipientH.323 entityprobably workswith ports outsidethis range. Yourfirewall rule shouldtherefore specifyFrom 4000-5000 ToAny.Table 1-10 Outbound ports supported by SCOPIA PathFinder ServerPort Range Protocol Functionality Direction Result of Blocking Port onFirewallRecipient Clientor Server Type