You must configure your network to permit communication to-and-from the Sapphire Cloud hosting your instance. Here is a list of the ports and protocols required.
Overview
Outbound access must be allowed to this IP range 64.65.61.0/24 which is where 7SIGNAL customer cloud instances are hosted.
Outbound access must be allowed to 192.237.169.61 for provisioning/management.
Outbound access must be allowed to 108.166.5.195 for diagnostics.
NTP/123 outbound must also be allowed.
Required for Sapphire Eye Connectivity
| Source | Destination | Protocol/Port | Purpose |
| Sapphire Eye Ethernet IP | redirector.7signal.com | DNS (TCP/UDP 53) | Cloud Redirector Service |
| Sapphire Eye Ethernet IP | 64.65.61.0/24 | TCP/7799 | Cloud Management |
| Sapphire Eye Ethernet IP | 64.65.61.0/24 | TCP/7800 | Cloud Management |
Recommended for Sapphire Eye Connectivity
| Source | Destination |
Protocol/Port |
Purpose |
| Sapphire Eye Ethernet IP | 108.166.5.195 | SYSLOG (UDP/514) | Health Monitoring |
| Sapphire Eye Ethernet IP | time1.google.com | NTP (UDP/123) | Time |
| Sapphire Eye Ethernet IP | time2.google.com | NTP (UDP/123) | Time |
| Sapphire Eye Ethernet IP | time3.google.com | NTP (UDP/123) | Time |
| Sapphire Eye Ethernet IP | time4.google.com | NTP (UDP/123) | Time |
Required for Sonar® Cloud Endpoint Testing
| Source | Destination | Protocol/Port | Purpose |
| Sapphire Eye Ethernet/Wi-Fi | Sonar Server | HTTP (TCP/80) | Throughput Test |
| Sapphire Eye Ethernet/Wi-Fi | Sonar Server | UDP/50000-50300 | Voice Quality Test |
| Sapphire Eye Ethernet/Wi-Fi | Sonar Server | ICMP | Ping Test |
Sonar Cloud Endpoints
| FQDN | IP Address | Location |
| east1.sonar.7signal.com | 185.59.223.104 | New Jersey, US |
| east2.sonar.7signal.com | 89.187.176.135 | New York, US |
| central1.sonar.7signal.com | 185.93.0.180 | Atlanta, US |
| midwest1.sonar.7signal.com | 185.93.1.59 | Chicago, US |
| pacific1.sonar.7signal.com | 185.152.67.214 | San Francisco, US |
| emea1.sonar.7signal.com | 89.187.169.70 | Frankfurt, DE |
| emea2.sonar.7signal.com | 195.181.165.171 | London, GB |
| apac1.sonar.7signal.com | 89.187.162.74 | Singapore |
Port Check Utility
Below are download links to utilities that test whether you have met these basic requirements. Ensure that you run the script from a machine on the same vlan that the Sapphire Eyes will use.
The ‘Welcome to Sapphire Cloud’ email you received from 7SIGNAL Support tells you which Sapphire Could instance is hosting your account. Edit the first line of the script and set the $carat parameter to the fully qualified domain name URL corresponding to your cloud instance.
7SIGNAL Port Check for Windows PowerShell
Additional Port Check Verification
After a Sapphire Eye is plugged into the network, you may find that it cannot connect to the cloud. If so, you can SSH to the Sapphire Eye and run the 7config conn check command to gain more insight. You should expect to see the following output:
Success: Carat server reachable by using carat_ip:7799
Success: TLS connection established to Carat carat_ip:7799
Success: Carat server reachable by using carat_ip:7800
Success: TLS connection established to Carat carat_ip:7800