Firewall

This section explains how to configure your Lifesize Fusion system for firewall traversal as a room system paired with Lifesize Cloud.

For information on configuring your firewall, see the online help available here.
For the port range, refer to the reserved ports online help.

Placement behind a firewall

Lifesize recommends that you place your system behind a firewall. Use one of the following options:

DMZwithpublicIPaddress	Placing your video systems in the DMZ allows you to assign public IP addresses. This configuration makes it easier for your system to connect with public video systems on the Internet.
Private LAN with NAT	Placing your video systems in the private LAN with Network Address Translation (NAT) obscures their private IP addresses, but makes calls with systems outside of your network more complicated.

Port Security

Lifesize Fusion video systems are network devices that offer different services and protocols for different purposes. Not all of these should be accessible from outside of your organization or network, such as access to the administrative functions of the device or SSH terminal access. To maintain security and help prevent unwanted malicious exploitation or attack, at a minimum, Lifesize recommends blocking external or inbound access to the following ports:

22 (SSH)
443 (HTTPS)

Lifesize recommends that these ports remain open for internal administrator access. Ensure that you change the default administrator password to be secure.

NOTE: Change the administrator password in the web interface at Security > Set the Admin Password. You can disable SSH access on the system at Security > Enable SSH Access.