# Firewall Whitelist Guide

To ensure proper operation of system devices and related software applications on our signage displays, please include the following URLs and ports in your whitelist when configuring the device within an internal network environment.

| Domain                                                             | Port  | Purpose                                                                                                |
| ------------------------------------------------------------------ | ----- | ------------------------------------------------------------------------------------------------------ |
| [
https://service.mokads.com
](https://service.mokads.com) | 443   | Enables the system to check for and download the latest firmware updates for NSD devices.              |
| UDP                                                                | 123   | Used to synchronize the device’s system time with Google’s Network Time Protocol (NTP) server.         |
| pid.agneovo.com                                                    | 12345 | Allows Neovo Manager to receive operational data from the device and send it to the server.            |
| neovomanager.agneovo.com                                           | 443   | Enables Neovo Manager to transmit configuration and control data from the web interface to the device. |
| api.agneovo.com                                                    |       | Stores user-related operations (pairing information) for Neovo Manager                                 |

{% hint style="info" %}
Please be advised: The IP addresses associated with our AWS-hosted services (such as `service.mokads.com` and `api.agneovo.com`) are dynamic and subject to change without notice.
{% endhint %}

### **Firewall Configuration SOP**

{% stepper %}
{% step %}

### Configure Outbound Rules

The NSD device initiates all requests via outbound connections. \
Please ensure the "Outbound Rules" allow traffic from the NSD device's local IP range to the destinations listed above.
{% endstep %}

{% step %}

### Use Domain Names for Whitelisting

Add the listed domain names to your firewall’s whitelist.
{% endstep %}

{% step %}

### Verify Port Access

Ensure that the Ports are explicitly opened. Many enterprise firewalls block non-standard ports by default, which may cause devices to appear "Offline" or have incorrect system times.
{% endstep %}

{% step %}

### Connectivity Test

Once configured, please perform the following on the NSD device:

1. Navigate to Setting > System > Software Upgrade and click to check for update and verify OTA server connection.
2. Log in to the Neovo Manager console to confirm the device status shows as "Online."
   {% endstep %}
   {% endstepper %}