Corporate firewall settings
If your players are located in a network protected by a corporate firewall, you need to allow access to the following domains and ports for the players to function properly.
Allowed domains
Content and calendar synchronization
| Domain | Purpose |
|---|---|
bsgn.cc | Main service domain |
*.bsgn.cc | Subdomains for content and calendar synchronization |
Player application updates
| Domain | Purpose |
|---|---|
*.bohemicasignage.com | Player update downloads |
Operating system updates
| Domain | Purpose |
|---|---|
*.ubuntu.com | Ubuntu system updates |
snapcraft.io | Snap packages |
api.snapcraft.io | Snap packages API |
*.snapcraftcontent.com | Snap package content |
livepatch.canonical.com | Kernel security patches |
Allowed ports
| Port | Protocol | Purpose |
|---|---|---|
| 80 | TCP | Content download (HTTP) |
| 443 | TCP | Content download (HTTPS) |
| 22 | TCP | Remote management (SSH) |
| 3389 | TCP | Remote management (RDP) |
| 51820 | UDP | Remote management (WireGuard VPN) |
Tips
Ports 80 and 443 are required for basic player operation. Ports 22, 3389, and 51820 are only needed if you want to manage the player remotely.
Network check
Before deploying your players, you can verify that all required domains and ports are accessible. Run the following command from a Bohemica Signage player or any other Ubuntu 24 device on the network:
Linux (Ubuntu 24):
wget -qO- dl.bsgn.cc/network-check.sh | sudo bash
You can also check the same local network from your Windows device beforehand:
Windows (PowerShell):
irm dl.bsgn.cc/network-check.ps1 | iex