You are using an unsupported browser. Please update your browser to the latest version on or before July 31, 2020.

DW Spectrum - FQDN or Allowlist for DW Cloud Access

FQDN or Allowlist for DW Spectrum® Cloud Access


Affected Roles:  Network Administrator

Related Digital Watchdog VMS Apps:  DW Spectrum® IPVMS

Complexity:  High

Last Edit:  January 16, 2023


Port Configuration

Video management systems (VMS) are bound to generate Internet traffic if a system is provided with Internet access.  Because of this, some port management may be needed to allow access through network security for merged systems to communicate with each other.

DW Cloud™ is part of a Peer-to-Peer (P2P) network that allows DW Spectrum® users to easily connect with individual servers and merged systems. 

When a user attempts to connect with a camera remotely, the connection will first be routed to the DW Cloud™ server, which will then direct the connection to the DW Spectrum® Server using the already established socket that was previously initiated.  Authentication and connection will then be established between the connecting DW Spectrum® Client and DW Spectrum® Server, providing access to the camera.

The presence of a firewall or SonicWall can interfere with this P2P communication.  This is why some network configuration may be required when using an Internet connection from behind a security wall.

This article will outline the relative port information required to allow access between DW Cloud™ and DW Spectrum® systems.

FQDN/Allowlisting – Firewall/SonicWall Pass List

To allow a remote connection through a firewall or SonicWall with DW Cloud™ or a DW Spectrum® Client interaction, the routing and Internet security settings of your network may require you to use a specified address list.

Use the information below to allowlist your DW Spectrum® Server and DW Cloud™ services for remote connection:

**NOTE:  When configuring a firewall or SonicWall, FQDN (Fully Qualified Domain Name) format should be used in order to successfully allowlist the specific services of DW Cloud™ and DW Spectrum®, as some of the endpoints do not inherently resolve to static IP addresses.

**NOTE:  To learn more about how the DW Cloud™ connection service work, you may refer to the article DW Cloud Overview.

For DW Cloud Portal and Cloud Database (TCP Ports:  80, 443)

Required to connect with or to disconnect systems from DW Cloud™ and to maintain such connections.

For DW Cloud Connection (NAT Traversal, Data Proxy Services)

Required for remotely connecting to DW Spectrum® through DW Cloud™ services.

Option 1 (Recommended):  Non-Region Specific

For Time Synchronization (TCP Port:  37)

Required to synchronize DW Spectrum® Servers times with DW Spectrum® time servers.


For Other Components (TCP Ports:  80, 443)


Option 2:  Region – and Component – Specific


For Relay – (TCP Ports:  80, 443; UDP Port: 3345)

**NOTE:  All below FQDNs and IP addresses must be added to the pass list (not only your region-specific ones).


United States

New York (
New York (backup) (
Los Angeles, CA (

Chicago, IL (
Сhicago, IL (backup) (

Miami, FL (
Dallas, TX (


Frankfurt, Germany (

Amsterdam, Netherlands (


Sydney (


China (used for China users only, excluding Hong Kong) (

Singapore (

For Connection Mediator – (TCP Ports:  80, 443; UDP Port:  3345)

United States ( (


Europe (

For Speed Testing (TCP Port:  80)

This resolves to the following IPs based on the client location:


For Time Synchronization (TCP Port:  37)

Required to synchronize Server times with DW time servers.

For License Activation/Deactivation (TCP Port:  80)

Required to activate and manage licenses online.

For Update Notifications

For Anonymous Reporting (TCP Ports:  80, 443)

For Fetching Public IP (TCP Port:  80)
  • 132
  • 16-Jan-2023