Overview:
Please be aware that this feature is supported starting with the 9.4.2 release.
This article describes how to secure Kerio Connect Multi Server.
All servers in Kerio Connect Multi-Server communicate between them unsecurely. Therefore, run Kerio Connect Multi-Server in a dedicated private network protected with a firewall.
Firewall settings
This table shows the protocols and ports used in Kerio Connect Multi-Server.
IMPORTANT
Do not change these ports.
Refer to the table below and on your firewall, open the ports for the front-end server and instant messaging server.
| Server | Protocol | Port |
|---|---|---|
| Syslog server | UDP | 514 |
| Directory server | LDAP | 389 |
| Back-end servers | IMAP | 143 |
| POP3 | 110 | |
| HTTP | 80 | |
| SMTP | 25 | |
| Kerio Connect Administration | 4040 | |
| Instant messaging server | XMPP | 5222 |
| XMPP SSL | 5223 | |
| Session server | memcached | 11211 |
| Distributed domain server | Synchronization | 44337 |
| Free/Busy HTTP | 80 | |
| Free/Busy HTTPS | 443 | |
| User migration HTTPS | 443 | |
| Front-end server | IMAP | 143 |
| IMAP SSL | 993 | |
| POP3 | 110 | |
| POP3 SSL | 995 | |
| SMTP | 25 | |
| SMTP SSL | 465 | |
| SMTP Submission | 587 | |
| HTTP | 80, 8800 | |
| HTTP SSL | 443, 8843 |