Whitelisting: Paladin

This article covers all whitelists for the Paladin database, network, and anti-virus, to employ when clients have their own managed services technician or group.

A PDF of this article is available to download by clicking on this link: Paladin Whitelisting

Paladin Whitelist

For internal communications between client’s PCs and Paladin’s database, open the following ports by running the following scripts in Command Prompt as Admin:

• Port 3050 (Firebird)
  • netsh advfirewall firewall add rule name=”Port 3050 tcp in” dir=in profile=domain,private,public action=allow protocol=TCP localport=3050

• Port 8881 (Paladin Remoting port; communication between Paladin POS instances)
  • netsh advfirewall firewall add rule name=”PaladinPOS in” dir=in
  • profile=domain,private,public action=allow protocol=TCP localport=8881

• Port 8882 (For Multi-Store Databases Only)
  • netsh advfirewall firewall add rule name=”PaladinPOS in” dir=in profile=domain,private,public action=allow protocol=TCP localport=8882

• Port 9000 & 9001(For Integrated Credit Card Processing with WorldPay(TriPOS)). Only run this script on devices running credit card transactions.

• • netsh advfirewall firewall add rule name=”TriPOS In” dir=in profile=domain,private,public action=allow protocol=TCP localport=9000,9001,9100

Anti-Virus Whitelist

• http://paladinpos.com/*
• http://update2.paladinpos.com/*
• http://*.paladinpos.com/*
• https://*.paladinpos.com/*
• https://*.paladinshop.com

Malware Scan Exclusions

The following are malware scan exclusions:

• C:\PaladinPOS
• C:\PaladinPOS\*\WinPOS.exe
• C:\Program Files (x86)\FlameRobin\flamerobin.exe
• C:\Program Files\Firebird\Firebird_3_0\firebird.exe
• C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
• C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe

 

Required Network Ports and Content Filtering

The following are network ports:

• 21 (using FTPS)
  • Database backups
• 25 (SMTP)(standard)
  • For emailing invoices and statements to customers
• 53 (DNS)
  • If external DNS Server is used, otherwise only needed to the internal DNS Server
• 80 (HTTP)(standard)
  • For checking Paladin Server for Updates
  • Logging Errors to Paladin
• 443 (HTTPS)(standard)
  • For checking Paladin Server for updates
  • Paladin Shop data sync (eCommerce)
• 2102 (TCP/UDP)
  • Paladin Backups
    • Hourly (if applicable) and Nightly
• 4200 (TCP)
  • Mobile3 data analytics
• 4439 (TCP/UDP)
  • Paladin Support Data Analytics
• 5691 (TCP/UDP)
  • Paladin Cloud Storage
• 9000 & 9001 (TCP/UDP)
  • Integrated Credit Card Processing with WorldPay(TriPOS) only

 The following are Content Filtering:

• *.paladinpos.com
• *.paladinshop.com