Corporate firewall settings
If your players are on a network behind a corporate firewall, you need to allow access to the following domains and ports for the players to function properly.
Allowed domains
Content and calendar synchronization
| Domain | Purpose |
|---|---|
bsgn.cc | Main service domain |
*.bsgn.cc | Subdomains for content and calendar synchronization |
Player application updates
| Domain | Purpose |
|---|---|
*.bohemicasignage.com | Player update downloads |
Operating system updates
| Domain | Purpose |
|---|---|
*.ubuntu.com | Ubuntu system updates |
snapcraft.io | Snap packages |
api.snapcraft.io | Snap packages API |
*.snapcraftcontent.com | Snap package content |
livepatch.canonical.com | Kernel security patches |
Allowed ports
| Port | Protocol | Purpose |
|---|---|---|
| 80 | TCP | Operating system and package updates (HTTP repositories) |
| 443 | TCP | Content download (HTTPS) |
| 22 | TCP | Remote management (SSH) |
| 3389 | TCP | Remote management (RDP) |
| 51820 | UDP | Remote management (WireGuard VPN) |
Tips
Port 443 is required for basic player operation. Port 80 is only used for operating system and package updates. Ports 22, 3389, and 51820 are only needed if you want to manage the player remotely.
Network check
Before deploying your players, you can verify that all required domains and ports are accessible.
Linux (run this on the player):
wget -qO- dl.bsgn.cc/network-check.sh | sudo bash
You can also run the check from a Windows device on the same network:
Windows (PowerShell):
irm dl.bsgn.cc/network-check.ps1 | iex