> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Network Port Requirements

> Firewall ports required for Syteca to function. Covers ports for client-to-server data, Management Tool access, remote client install, and database connections.

Open the following ports in Windows Firewall (or any other firewall in your environment) to ensure stable communication between Syteca components. Which ports you need depends on your deployment topology and the features you use.

## Required and optional ports

| Source → Destination                     | Protocol / Port         | When required                                                                                                                                                                                                                                                            |
| ---------------------------------------- | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Endpoint Client → Application Server     | **TCP 9447**            | **Always required.** Carries session data from clients to the Application Server. In SaaS deployments, required for Windows clients only.                                                                                                                                |
| Application Server → Management Tool     | **TCP 22713 and 22714** | Required only if the Management Tool and Application Server are installed on **different machines**.                                                                                                                                                                     |
| Management Tool → Browser                | **TCP 443**             | Required if the Management Tool and Application Server are on the **same machine**. In SaaS, also required for Windows, macOS, and Linux clients to retrieve updated connection certificates, and for macOS / Linux clients to send session data (instead of port 9447). |
| Application Server → Endpoint Clients    | **TCP 135 and 445**     | Required only for **remote Windows client installation**. Not needed if you install clients manually or via Group Policy.                                                                                                                                                |
| Application Server → PostgreSQL database | **TCP 5432**            | Required only if the Application Server and PostgreSQL database are on **different machines**. See [Set Up a Remote PostgreSQL Server](/docs/administration/database/postgresql-remote).                                                                                      |
| Application Server → MS SQL database     | **TCP 1433**            | Required only if the Application Server and MS SQL database are on **different machines**.                                                                                                                                                                               |

<Note>
  In most single-machine PoC or small deployments, only **TCP 9447** needs to be opened. Additional ports are required only as you separate components across machines.
</Note>

## SaaS-specific notes

SaaS deployments use a slightly different port layout:

* **TCP 9447** — required for Windows clients only (session data upload).
* **TCP 443** — required for all client types (certificate updates) and replaces TCP 9447 for macOS and Linux session data.

## Next steps

<CardGroup cols={2}>
  <Card title="Application Server Requirements" icon="server" href="/docs/get-started/requirements/application-server">
    Hardware and OS requirements for the Application Server by deployment size.
  </Card>

  <Card title="Set Up a Remote PostgreSQL Server" icon="database" href="/docs/administration/database/postgresql-remote">
    Configure port 5432 and remote access between the Application Server and PostgreSQL.
  </Card>

  <Card title="Install a Windows Client" icon="monitor" href="/docs/administration/clients/install-windows">
    Deploy the Syteca client on Windows endpoints, including silent MSI and GPO methods.
  </Card>

  <Card title="Installation Checklist" icon="clipboard-list" href="/docs/administration/deployment/installation-checklist">
    End-to-end pre-deployment checklist for on-premises Syteca installations.
  </Card>
</CardGroup>