Which port does Android use for OS updates?

[TwistedHelixis]

Hello, We seem to have an issue where our Android tablets will only update if they are taken home.Our firewall is controlled externally but routes through our LA. I logged a job with our LA and have been sent a change request form asking me which ports and IP's I need opening.

 

This does seem like an odd request as I would have assumed everyone that routes through the LA would also need these settings, but that' a different story.

 

Anyway, how do I find the ports etc I need to supply.

 

BTW as far as I can tell everything else works on the tablets, such as the app store and Google apps.

 

Thanks for any advice.

[PotNoodleTech]

As far as I know it's 80/443 as per most web traffic?

[TwistedHelixis]

As far as I know it's 80/443 as per most web traffic?

 

That's odd then. Obviously we already have those ports open.

[computer_expert]

Are you/the LA doing HTTPS inspection? if so you may need to install the filters certificate onto the devices in question

 

 

edit - this page states that UDP/TCP ports 5228 need to be allowed (outbound I'm assuming) https://support.google.com/googleplay/answer/2651367

Edited October 11, 2017 by computer_expert

[ADMaster]

Can you install apps on the tablets?

Google play uses 5228 but I'm not sure if that is where OS updates come from.

[TwistedHelixis]

Are you/the LA doing HTTPS inspection? if so you may need to install the filters certificate onto the devices in question

 

Yes they do and I already have installed the cert they supply, without that installed nothing much works on the tablet.

 

- - - Updated - - -

 

Can you install apps on the tablets?

Yes apps install fine

[TwistedHelixis]

I just found the following on an LG Android forum and wondered if each vendor might have their own ports for updates? Or is 7005 a standard Android port to allow?

 

TCP Port 7005, which is a 'Voulme Management Server' Port but it is also default for agent to server & software control.

 

https://community.spiceworks.com/topic/2014355-lg-android-firewall-ports

Edited October 12, 2017 by TwistedHelixis

[ADMaster]

Best thing you can do in this case is give the firewall provider the android IP try to trigger and update.

 

Then ask them to review the connections for that time.

 

Maybe I'm lucky in that way, my provider will work with me to troubleshoot ports and open stuff on the fly to test things. But then ask for the changes in writing to make if official and all.