Technical Hardware and Networking Considerations

This section is intended for network installers and hardware consultants.  It deals with some basic firewall considerations, and other areas that may become issues.

Computers for Xebra Clients

Essentially any computer that can run WindowsXP or newer will run a Xebra Client.

Computer Monitor Selection

Windows® applications work best on higher resolution monitors. While Xebra will work on nearly any color monitor, operator efficiency and comfort will be increased with larger monitors with higher resolution. A 19 inch flat panel monitor with 1280 X 1024 resolution should be the minimum size considered when purchasing a new monitor. IF you have older CRT monitors, you should consider replacing them as your budget permits. We have also added multi-monitor support to the Xebra Client.  Windows will open in their previous position, even if this is on a secondary monitor.

Remote Access to the Xebra Server

There is no need for VPN software to provide remote access to the Xebra Server. VPN software may be installed to share other applications, but should not be used for the Xebra application.

Remote access is required for the real-time E-Commerce application we offer. It is also required for remote client operations. Remote operation requires that the IP address used on the Xebra server be  available to the public on the port specified. The IP address must be static. Having an IP address on the port specified in the Xebra server does not create security issues. The Xebra Server rejects any data that does not come from an authorized Xebra Client.

In most cases, the Xebra Server can run directly on the public IP address with appropriate firewall settings. In some cases, the server is run with a local IP address and the router is programmed to translate a public IP address and port combination to the private IP address that is used on the Xebra Server. In this situation, remote clients will use the public IP address being translated while clients connected via the LAN will use the private IP address.

Ports for Outgoing Traffic

Most Firewall installations default to leaving all ports open to outbound traffic. They also offer the option to block all ports for outbound traffic. Some network people make this selection with the idea that it makes the system more secure. Having ports blocked for outbound traffic prevents people inside your company from using the port to send information. It does nothing to protect the system from outside attack.

The following ports must be open for outgoing traffic:

PORT 4001 is used to request update downloads from the Xebra Server. It does not need to be open for incoming traffic. If desired, the outgoing traffic may be limited to IP address 209.173.24.36

Port 5001 is used to send data to the optional Xebra Backup Service. It does not need to be open for incoming traffic. If desired, the outgoing traffic may be limited to IP address 12.27.100.130.

For access to a remote Xebra Server, the port specified for the server must be open to outbound traffic. This will apply to all Xebra Services customers as well as remote client sites accessing self-hosted servers.