If HSNM is connected to a network protected by a firewall (for example on a DMZ), the following ports must be opened. In case HSNM has been installed on a private network LAN “natted” through a router, you will have to perform a port forwarding for the following ports:
| Port N° | Protocol | Direction | Description |
| 80 | TCP and UDP | IN and OUT | Necessary to reach the administration console via the web. |
| 443 | TCP | IN and OUT | Necessary for all HTTPS and DoH traffic. |
| 1514 | UDP | IN | Necessary to receive the connection logs of the various HGW, PAEGW and PGW gateways. |
| 21 | TCP and UDP | IN and OUT | Necessary to install any software updates. |
| 22 | TCP and UDP | IN | Necessary for any remote assistance access. |
| 23 | TCP and UDP | OUT | Necessary to connect to the Hotspots via TELNET. |
| 53 | TCP and UDP | IN and OUT | Necessary to let gateways or external systems use the “Family DNS”. |
| 389 | TCP and UDP | IN and OUT | Necessary to perform LDAP authentications. |
| 880 | TCP and UDP | IN e OUT | Necessary to log in and log out on Cambium Network. |
| 9997 9998 |
TCP and UDP | IN and OUT | Necessary to log in and log out on Ruckus. |
| 8443 8880 | TCP and UDP | IN and OUT | Necessary to log in and out on Ubiquiti Unifi/Dream Machine Controller. |
| 13000 13001 13013 |
TCP and UDP | IN and OUT | Necessary to send SMSs. |
| 123 | TCP and UDP | OUT | Necessary for clock synchronization. |
| 5900 | TCP and UDP | IN | Necessary for any remote assistance access. |
| 3799 | TCP e UDP | OUT | Necessary to run radius client commands (user disconnection). |
| 1812 1813 |
TCP and UDP | IN and OUT | Necessary for authentication of hotspot users via a RADIUS server. |
| 25 | TCP and UDP | OUT | Necessary to send emails. |
| 8728 | TCP and UDP | OUT | Necessary to connect to the hotspots via APIs. |
| 3306 | TCP and UDP | IN and OUT | Necessary to connect external databases or for data replica. |
| 24000 | TCP | IN and OUT | Necessary to receive GPS tracking and telemetry data from FMXXX Teltonika-type devices or from those using the TAIP protocol. |