Network requirements¶
Allow these hosts and ports so Connect can reach Jump's cloud and accept connections. Jump's cloud sets up each connection; traffic then flows directly between the computers, or through a relay. See Choose a connectivity option.
In short: if your firewall allows outbound traffic, you usually don't need to change anything. Use this page if your firewall blocks outbound traffic by default, or connections are slow.
Hosts to allow¶
| Host | Port | Protocol | Required |
|---|---|---|---|
neuron.jumpdesktop.com |
443 | TCP | Yes |
api.jumpdesktop.com |
443 | TCP | Yes |
app.jumpdesktop.com |
443 | TCP | Recommended: sign-in, Connect Code redemption, and the Teams dashboard |
mirror.jumpdesktop.com |
443 | TCP | Recommended: updates on Windows and macOS |
jumpdesktop.com |
443 | TCP | Linux (beta): apt and yum package repositories for updates |
turn.jumpdesktop.com |
3478 (UDP), 443 (TCP) | UDP, TCP | For relayed connections. Not needed on the remote computer's network if computers reach each other directly or Connect uses your own relay. |
*.amazontrust.com, *.comodoca.com |
80 | TCP | Optional: certificate revocation checks |
*.ingest.us.sentry.io |
443 | TCP | Optional: crash reports on Windows and macOS, when enabled |
Jump's servers are behind load balancers. Their IP addresses can change, so allow host names, not IP addresses.
Client devices running Jump Desktop use the same neuron, api, and app hosts, and turn.jumpdesktop.com for relayed connections. Jump Desktop apps also use mirror.jumpdesktop.com; the Windows and Mac direct-download apps get updates from it.
On macOS with Gatekeeper on (the default), also allow Apple's certificate servers: certs.apple.com, ocsp.apple.com, and ocsp2.apple.com (TCP 80 and 443), and crl.apple.com (TCP 80).
Ports for direct connections¶
Allow UDP between computers so connections can be direct. Connecting over a VPN is supported; allow the same ports over the VPN. Otherwise Jump uses a relay, which can be slower.
These are UDP ports on the remote computer (the one running Connect). On the remote computer's firewall, allow inbound UDP to this range and outbound UDP from it. Client devices use any local UDP port, so their network only needs to allow outbound UDP.
| Remote computer | Connect's UDP port range |
|---|---|
| No Connect Configuration assigned | 35385 to 45385 |
| Connect Configuration assigned | Its Connection Port Range: 35385 to 35485 unless changed, or any port if set to Any |
Set Connection Port Range in a Connect Configuration (Enterprise plan). To require direct connections, see Choose a connectivity option.
Proxies¶
Connect supports HTTPS and SOCKS5 proxies. See Use a proxy server.
Computers without internet access¶
Use Cloudless Fluid (Enterprise plan) to connect without Jump's cloud. Its ports are listed on that page.