Main Communication Ports

If you need to adjust your firewall, it is recommended to allow MyQ processes in the firewall and not particular ports. If you allow particular ports, MyQ may stop working if:

you change port settings in MyQ, or
you upgrade to a newer version and the port specification has changed.

Terminal packages may use additional ports. Check the particular terminal package specification for details.

Printer Status

Make sure to create an exception that allows ICMP Echo Requests/Replies (Ping) through your Windows Firewall, as MyQ uses it by default to check the printers' status.

Incoming Ports

The server is listening on the following ports (does not include private ports):

Protocol	Port	Configurable	Description
TCP	21	Yes (WebUI)	FTP protocol for receiving scans⁽¹⁾. The server runs only in passive mode and each data connection runs over a dynamic port in the 49152 - 65535 range.
TCP	25	Yes (WebUI)	SMTP over StartTLS⁽²⁾ for Scan Management function, receiving email notifications from printers, and for receiving emails with jobs.
TCP	443	Yes (Easy Config)	HTTPS protocol for: Accessing MyQ web interface. IPPS printing (printing URL `/queue/<queue name>`) Mobile printing (AirPrint/Mopria; printing URL `/ipp-airPrint/<queue name>`). Communication with Embedded terminals. Job roaming among MyQ servers. Previously, this port was 8090 and it is preserved as such for upgraded installations.
TCP	515	Yes (WebUI)	LPR protocol for print job transmission to the MyQ server.
TCP	587	Yes (WebUI)	SMTPS protocol. Used in the same scenarios as SMTP.
TCP	9100	Yes (WebUI)	RAW protocol⁽³⁾ for print job transmission to the MyQ server.
UDP	11112	No	Communication with MyQ Desktop Client (MDC) 10.0 and lower. The answer is returned on a dynamic port in the 49152 - 65535 range. Not required with MDC 10.2+.

(1) FTP ports might not be required for newer embedded terminals (the majority of the latest 8.2+ terminals except for Epson) where scanning can be performed over HTTP. The dependency in certain situations is based on the particular device models within your organization. Since MyQ 10.2 Print Server, the FTP server can be also completely turned off in the Settings – Network section of the MyQ Web Admin Interface.
(2) Regarding the requirements for SMTP ports, the MyQ SMTP Server can be turned off in MyQ Print Server’s Settings – Network, and these incoming ports closed as well since MyQ 10.2. This is possible if you do not intend to use MyQ Print Server as an SMTP server in your MFDs to redirect email communication from the device for the Scan to Me feature on the device’s native panel.
(3) RAW ports are required only when queues using them exist. RAW reception for a queue is configured in Queues – queue’s detail – Job Receiving – Jobs via RAW protocol.

PM Server

Protocol	Port	Configurable	Description
TCP	631	No	Port for Mobile print via IPP.
TCP	717	No	Port for Mobile print via IPPS.
TCP	9090, 9091	No	Necessary for remote setup of Kyocera embedded terminals.
TCP	9092	No	Felica reader
TCP	9093	Yes (WebUI)	Authentication / Authorization.
TCP	9094	No	Driver access, mobile access.
TCP	9095	Yes (WebUI)	Spooler service.
TCP	9097	Yes (WebUI)	Log information event.
TCP	9098	Yes (WebUI)	Job status event.
TCP	9099	Yes (WebUI)	Thrift access.
TCP	9101	No	User session service.

Outgoing Ports

The server is connecting to the following ports (does not include localhost connections):

Protocol	Port	Description
TCP	443	HTTPS port for: IPPS protocol for print job transmission from MyQ to printing devices. License activation server. The MyQ license server address is `http://license2.myq.cz/`. Other enabled services from Settings→External Systems (Microsoft Universal Print, One Drive, ...)
TCP	515	LPR protocol for print job transmission from MyQ to printing devices.
TCP	631	IPP protocol for print job transmission from MyQ to printing devices.
TCP	9100	Raw protocol for print job transmission from MyQ to printing devices.
TCP	10040	MPP/MPPS protocol for print job transmission from MyQ to printing devices.

You can also setup additional services that require further configuration and their port will often differ:

Protocol	Port	Default	Description
TCP	Custom	110	Connection to email server via POP3 protocol for receiving jobs via email.
TCP	Custom	143/993	Connection to email server via IMAP/IMAPS protocol for receiving jobs via email.
TCP	Custom	25/465/587	Connection to SMTP server for sending outgoing emails from MyQ.
TCP	Custom	389/636/1812	Connection to Authentication server(s) (LDAP, Radius, ...) for user authentication/synchronization.
TCP	Custom	8093	Connection to MyQ Central Server.
UDP	Custom	161	SNMP protocol for communication with printing devices. Answer from printer is returned on a dynamic port.
TCP	Custom	-	Connection to External credit account.

As for outgoing SMTP ports, port 587 is used for email transmission via Microsoft Exchange Online or Gmail (in Settings – Connections); in the case of the Classic SMTP Server method, the connection and port are configured in Settings – Network.

MyQ can connect to dynamic ports in the following contexts:

Protocol

Port

Description

UDP

Dynamic

Communication with MDC (Former SJM and SPS). The port range is 49152 - 65535.

Not required with MDC 10.2+.

Embedded Packages Ports

Kyocera

If SSL is on, it's used for the following events:

Events are notified internally to the embedded application. No network communication is used.

MyQ Server

(Protocol: Port - Description)

HTTP or HTTPS: 443 (default) - it depends on the configuration in MyQ Easy Config.
SMTP: 25 (default) - it depends on the port configured in MyQ, Settings, Network, SMTP. Used for Panel Scan to email.

Package

(Protocol: Port - Description)

HTTP: (IN) 8081 to 8089 (default) - automatically selected during the installation of the package on the server. This is used only in localhost.
TCP: (OUT) 11108 - TCP link to device. Send request to Printers.

Kyocera 8.0+
A random TCP port is opened on each package service start/restart, to be used for receiving scans over FTP. The package then tries to configure the Windows firewall to open the port for outside connections.

Printer

(Protocol: Port - Description)

TCP: (IN/OUT) 11108 - TCP link to device. Usage: Receive requests from Package.
TCP: (IN) 10040 - Usage: Use printer as a proxy for TCP communication.
UDP: (IN) 11108 in - UDP Link to device. Multipurpose. It dispatches all the received UDP packages. Usage: Receive requests to get local jobs.
UDP: (OUT) 11108 - Send broadcast to printers. GetJobs (Local Spooling)
TCP: (IN/OUT_ 10030 - TCP link to device. Usage: Receive requests or responses from other devices.
TCP: (IN) 10010 - Usage: Receive raw data of print jobs for local direct print job.
TCP: (IN) 10011 - Usage: Receive raw data of print jobs for local hold job.
TCP: (IN) 10013 - Usage: Receive raw data of print jobs for local delegate job.
TCP: (IN) 10020 - Usage: Receive raw data of print jobs for local LPR jobs.
TCP: (IN) 10012 - Usage: Receive raw data of print jobs for local pull print jobs (Pull Print).

Note: Other ports used by the printer (common for all printers. Eg. 9100 for RAW printing, etc.).

Pay attention to the Incoming Ports section, specifically the PM Server since it is an essential component for configuring Kyocera devices remotely, communicating with Kyocera or Kyocera Lite embedded terminals, and providing Kyocera-specific features supported by the vendor’s print drivers.

HP
If SSL is on, it's used for the following events:	All types of events go through SSL.
MyQ Server (Protocol: Port - Description)	HTTP or HTTPS: 8090 (default) - it depends on the configuration in MyQ Easy Config. SMTP: 25 (default) - it depends on the port configured in MyQ, Settings, Network, SMTP. Used for Panel Scan to email.
Package (Protocol: Port - Description)	HTTP: (IN) 8081 to 8089 (default) - It depends on the port selected during the installation of the package on the server. This is used only in localhost.
Printer (Protocol: Port - Description)	(OUT) 57627 - non SSL. (OUT) 7627 - SSL.

Toshiba
If SSL is on, it's used for the following events:	All types of events go through SSL.
MyQ Server (Protocol: Port - Description)	HTTP or HTTPS: 8090 (default) - it depends on the configuration in MyQ Easy Config. SMTP: 25 (default) - it depends on the port configured in MyQ, Settings, Network, SMTP. Used for Panel Scan to email.
Package (Protocol: Port - Description)	HTTP: (IN) 8081 to 8089 (default) - It depends on the port selected during the installation of the package on the server. This is used only in localhost.
Printer (Protocol: Port - Description)	(OUT) 49629, 50083 - non SSL. (OUT) 49630, 50083 - SSL.

Xerox
If SSL is on, it's used for the following events:	Always SSL
MyQ Server (Protocol: Port - Description)	HTTP or HTTPS: 8090 (default) - it depends on the configuration in MyQ Easy Config. SMTP: 25 (default) - it depends on the port configured in MyQ, Settings, Network, SMTP. Used for Panel Scan to email.
Package (Protocol: Port - Description)	HTTP: (IN) 8081 to 8089 (default) - It depends on the port selected during the installation of the package on the server. This is used only in localhost.
Printer (Protocol: Port - Description)	HTTP: (OUT) 80 - Used to access to Xerox EIP SNMP: (OUT) 161 - Used to set up the configuration of the printer.

Canon
If SSL is on, it's used for the following events:	Events are notified internally to the embedded application. No network communication is used.
MyQ Server (Protocol: Port - Description)	HTTP or HTTPS: 8090 (default) - it depends on the configuration in MyQ Easy Config. SMTP: 25 (default) - it depends on the port configured in MyQ, Settings, Network, SMTP. Used for Panel Scan to email.
Package (Protocol: Port - Description)	HTTP: (IN) 8081 to 8089 (default) - It depends on the port selected during the installation of the package on the server. This is used only in localhost. TCP: (OUT) 11108 - TCP link to device. Send request to Printers.
Printer (Protocol: Port - Description)	TCP: 11108 - TCP link to device. Usage: Receive requests from Package. TCP: 10040 - Usage: Use printer as a proxy for TCP communication. Note: Other ports used by the printer (common for all printers. Eg 9100 for raw printing, etc.).

Ricoh

If SSL is on, it's used for the following events:

Events are notified internally to the embedded application. No network communication is used.

Printer

(Protocol: Port - Description)

TCP: 49109 - sends live application logs from the device.
TCP: 11108 - TCP link to device. Usage: Receive requests from Package.
TCP: 10040 - Usage: Use printer as a proxy for TCP communication.
UDP: 11108 in - UDP Link to device. Multipurpose. It dispatches all the received UDP packages. Usage: Receive requests to get local jobs.
UDP: 11108 out - Send broadcast to printers. GetJobs (Local Spooling)
TCP: 10030 - TCP link to device. Usage: Receive requests or responses from other devices.
TCP: 10010 - Usage: Receive raw data of print jobs for local direct print job.
TCP: 10011 - Usage: Receive raw data of print jobs for local hold job.
TCP: 10013 - Usage: Receive raw data of print jobs for local delegate job.
TCP: 10020 - Usage: Receive raw data of print jobs for local LPR jobs.
TCP: 10012 - Usage: Receive raw data of print jobs for local pull print jobs (Pull Print).

Note: Other ports used by the printer (common for all printers. Eg 9100 for raw printing, etc.).

Sharp
If SSL is on, it's used for the following events:	All types of events go through SSL.
MyQ Server (Protocol: Port - Description)	HTTP or HTTPS: 8090 (default) - it depends on the configuration in MyQ Easy Config. SMTP: 25 (default) - it depends on the port configured in MyQ, Settings, Network, SMTP. Used for Panel Scan to email.
Package (Protocol: Port - Description)	HTTP: (IN) 8081 to 8089 (default) - It depends on the port selected during the installation of the package on the server. This is used only in localhost.
Printer (Protocol: Port - Description)	Any port from the <0-65535> range. Default: (OUT) 10080 - non SSL (OUT) 10443 - SSL

Epson
If SSL is on, it's used for the following events:	All types of events go through SSL.
MyQ Server (Protocol: Port - Description)	HTTP or HTTPS: 8090 (default) - it depends on the configuration in MyQ Easy Config. SMTP: 25 (default) - it depends on the port configured in MyQ, Settings, Network, SMTP. Used for Panel Scan to email.
Package (Protocol: Port - Description)	HTTP: (IN) 8081 to 8089 (default) - It depends on the port selected during the installation of the package on the server. This is used only in localhost.
Printer (Protocol: Port - Description)	(OUT) 80 - non SSL (OUT) 443 - SSL

Pay attention to the Incoming Ports section, specifically the FTP server since only selected Epson devices support scanning over HTTPS, and that support is limited, thus using FTP might be required.

Some of the above mentioned ports can be changed in case of conflicts with other applications.

Conflicts of the communication ports with other software will be revealed by the Windows socket error 10048 error message.

Printer Status

Incoming Ports

PM Server

Outgoing Ports

Embedded Packages Ports

Kyocera

HP

Toshiba

Xerox

Canon

Ricoh

Sharp

Epson