NCR Aloha Network

Configuration Guide
Last Updated: August,28 2016 v16.8

NCR Aloha Network Configuration Guide Overview

The network is the key entry point into any server environment where sensitive data is transferred between syste ms. Maintaining a high level of
network integrity is essential for ensuring quality service and effectively managing operational risks.
NCR understands the need for enhanced security measures an d designs its line of Aloha Enterprise services and products to work with most firewall
or proxy servers you might use, promoting a safer network connectivity environment.

Network Configuration Requirements

The following Hosted Solutions table provides the parameters you need to allow Aloha Enterprise services and products acces s through established
firewalls

General Firewall / Router Requirements for AlohaEnterprise.com Services

Depending on firewall configuration you may need to add the following addresses/IPs to your router to allow access to the following sites commonly used by
our Aloha Enterprise applications. 206.123.121.2 thru 206.123.121.126

NCR Hosted Solutions

Application Program/Feature Exceptions Port/Protocol Direction URL / Purpose IP Address

Aloha Configuration AeMInStoreProcessor.exe 80 – HTTP

Center (CFC) v15.6 and www.configurationcenter.com 206.123.121.72
below AeMInStoreService.exe 443 – TCP

80 – HTTP www.configurationcenter.com 206.123.121.72

Aloha Configuration AeMInStoreProcessor.exe
Center (CFC) v16.4 and
above AeMInStoreService.exe host.configurationcenter.com 38.107.252.69
443 – HTTPS
dd.configurationcenter.com 38.107.252.78

CFC Password Reset 443 – HTTPS https://web.ncrbackoffice.com 38.107.252.120

NCR Corporation® 2016 Page 1 of 13

 NCR Aloha Network Configuration Guide

Application Program/Feature Exceptions Port/Protocol Direction URL / Purpose IP Address

CFC Password Reset

443 – HTTPS https://ppdweb.ncrbackoffice.com 38.107.252.124
UAT v15.6 and below

CFC Password Reset https://web.testconfigurationcenter.co

443 – HTTPS 72.249.149.151
UAT v16.4 and above m

80 – HTTP www.configurationcenter.com 206.123.121.72

Aloha Manager (AM)
443 – HTTPS services.configurationcenter.com 38.107.250.156

CFC HR Bridge 443 – HTTPS services.configurationcenter.com 38.107.252.61

CFC UAT v15.6 and AeMInStoreProcessor.exe 80 – HTTP

www.testconfigurationcenter.com 72.249.149.146
below AeMInStoreService.exe 443 – TCP

80 – HTTP www.testconfigurationcenter.com 72.249.149.146

CFC UAT v16.4 and AeMInStoreProcessor.exe
above AeMInStoreService.exe host.testconfigurationcenter.com 72.249.149.157
443 – HTTPS
dd.testconfigurationcenter.com 72.249.149.158

CFC UAT HR Bridge 443 – HTTPS services.testconfigurationcenter.com 72.249.149.147

ftp.alohaenterprise.com 206.123.121.70
FTP (Passive ftp1.alohaenterprise.com 206.123.121.70
mode) ftp2.alohaenterprise.com 206.123.121.70
Outbound
21 – TCP ftpfarm.alohaenterprise.com 206.123.121.70
Outbound
Aloha Insight AlohaFTP.exe 1024-65535 – TCP archive.alohaenterprise.com 206.123.121.71
FTP/FTP Download Alohas.exe download1.alohaenterprise.com 206.123.121.89
FTP (Active mode) download2.alohaenterprise.com 206.123.121.89
Outbound
21 – TCP download.alohaenterprise.com 206.123.121.90
Inbound
20 – TCP webfarm.alohaenterprise.com 206.123.121.90
archive.alohaenterprise.com 206.123.121.71

80 – HTTP esinst.alohaenterprise.com 206.123.121.90

80 – TCP
Radiant Heartbeat Hbaloha.dll
8080 – HTTP
(PollCheck) PollCheck.exe
8080 – TCP
443 – HTTPS

Aloha Insight N/A 1433-UDP 206.123.121.4

Data Warehouse 1433-TCP

NCR Corporation® 2016 Page 2 of 13

 NCR Aloha Network Configuration Guide

Application Program/Feature Exceptions Port/Protocol Direction URL / Purpose IP Address

80 – HTTP webfarm.alohaenterprise.com 206.123.121.90

Aloha Insight 80 – TCP download.alohaenterprise.com
InsightInstall.exe
Web site, Reporting, 8080 – HTTP <co name>. alohaenterprise.com
GenPoll.exe
Document Download, & 8080 – TCP Insight Reporting Range 206.123.121.2
MemberLink Access eGrind.exe thru .126*
443 – HTTPS
4430 – HTTPS

ssfm.alohaenterprise.com (data 206.123.121.88

Aloha Restore PollCheck.exe 443 – HTTPS transport) or
(Heartbeat) AlohaRestore.exe 80 – HTTP esinst.alohaenterprise.com (software 38.107.252.20
updates) 206.123.121.90

Aloha Loyalty Redirector.exe 9099-TCP In/Outbound efreq.alohaenterprise.com 206.123.121.92

StoredValue.Boh.App.exe
Aloha Stored Value 21 – FTPS sv1ftp.alohaenterprise.com 38.107.252.80
StoredValue.Boh.UpdateService. storedvalue.alohaenterprise.com 38.107.252.89
Version SV1 443 - HTTPS
exe

ATDDB.exe
Aloha Stored Value ecard.alohaenterprise.com
GCLegacy.exe 8080 – HTTP 206.123.121.91
Version G1 vbo.alohaenterprise.com
VBOConnect.exe

Aloha Stored Value

N/A 443 – HTTPS storedvalue.alohaenterprise.com 38.107.252.89
Terminal Edition

80 – HTTP/TCP Inbound weborder.alohaenterprise.com 206.123.121.25

8082 –HTTP Inbound weborder.alohaenterprise.com
8082 – TCP Inbound weborder.alohaenterprise.com
443 – TCP Inbound weborder.alohaenterprise.com
NOTE: the Aloha Online product 9880 – TCP Inbound weborder.alohaenterprise.com
Aloha Online has dependencies on Command 8888 - TCP Inbound weborder.alohaenterprise.com
Center and Restaurant Guard. 4430 – UDP Inbound weborder.alohaenterprise.com
9888 – UDP Inbound weborder.alohaenterprise.com
443 – HTTPS Outbound api.alohaorderonline.com 38.107.252.57
443 – HTTPS Outbound adminapi.alohaorderonline.com 38.107.252.57
443 – HTTPS Outbound *.alohaorderonline.com 206.123.121.75

NCR Corporation® 2016 Page 3 of 13

 NCR Aloha Network Configuration Guide

Application Program/Feature Exceptions Port/Protocol Direction URL / Purpose IP Address

GuestManagerFiles.exe 8500 – TCP

Inbound
GuestManagerHost.exe 80 – HTTP
Inbound guestmgr.alohaenterprise.com 206.123.121.25
Aloha Guest Manager GuestManagerUpdate.exe 8095 – TCP
Inbound webtexting.alohaenterprise.com 38.107.252.74
GMSettings.exe 443 – TCP
In/Outbound
DeviceHost.exe 22769 – UDP

80 – HTTPS Inbound www.radiantupdate.com

Aloha Update AlohaSuiteInstaller.exe 8080 – HTTPS Inbound alohaupdate.ncr.com 206.123.121.72
443 – TCP Inbound package.alohaupdate.ncr.com

rdf2.alohaenterprise.com 206.123.121.24
80 – TCP
ssh.alohaenterprise.com 206.123.121.27
8080 – TCP
crl.godaddy.com 72.167.18.237
443 – HTTPS
CMCInst.exe 72.167.18.238
22 or 80/443 – TCP
CMCAgent.exe 72.167.239.237
9150 – TCP Inbound
CmcSvcWatcher.exe 72.167.239.238
9151 – TCP Inbound
RadSprtA.exe 188.121.36.237
Command Center 9157 – TCP Inbound
Pvnc.exe 188.121.36.238
Whitelisting 11000 – TCP Inbound
Pollcheck.exe 182.50.136.237
Certificate Validation 11001 – UDP Inbound
HBProxy.exe 185.50.136.238
11002 – UDP Inbound
HBPrint.exe 50.63.243.228
9200 – TCP/ UDP Inbound
CMCProxy.exe 50.63.243.229
9201 – TCP/ UDP Inbound
HBUtil.exe crl.verisign.com 199.7.48.0:20
9202 – TCP/ UDP Inbound
199.7.71.0:24
9203 – TCP/ UDP Inbound
199.7.72.0:22
9204 – TCP/ UDP Inbound
199.7.76.0:24

NCR Corporation® 2016 Page 4 of 13

 NCR Aloha Network Configuration Guide

Application Program/Feature Exceptions Port/Protocol Direction URL / Purpose IP Address

www.ncrvitalcast.com 153.69.71.29
vcserver6.txdigital.com 219.81.32.122
*.teamviewer.com Resolved by DNS

80 – HTTP Outbound nist1-pa.ustiming.org or 50.63.202.59 or

Digital Menu Boards 443 – HTTPS Outbound time.windows.com or 23.99.222.162 or
5938 – TCP Outbound time.nist.gov 128.138.141.17

*.ws.symantec.com Actual IP
*.symcb.com addresses are
*.symcd.com subject to change
by Symantec

NCR BackOffice 80 – HTTP

boa.menulink.net 206.123.121.44
Application 443 – HTTPS

80 – HTTP
NCR BackOffice Installs install.ncrbackoffice.com 38.107.252.122
443 – HTTPS

NCR BackOffice Data

443 – HTTPS data.ncrbackoffice.com 38.107.252.121
Service

NCR BackOffice HR
443 – HTTPS secure.menulink.net 38.107.252.126
Bridge

NCR BackOffice
443 – HTTPS anywhere.ncrbackoffice.com 38.107.252.120
Anywhere

NCR BackOffice
443 – HTTPS integration.ncrbackoffice.com 38.107.252.123
Integration

NCR Back Office

10781 – TCP license.menulink.net 64.244.148.153
Licensing

1433 –TCP/UDP
NCR Back Office
Replication 1434 –TCP/UDP
(configurable)

NCR Back Office Pulse

User Provisioning
443 – HTTPS data.ncrbackoffice.com 38.107.252.121
(for My Schedule and
Mobile Inventory)

NCR Corporation® 2016 Page 5 of 13

 NCR Aloha Network Configuration Guide

Application Program/Feature Exceptions Port/Protocol Direction URL / Purpose IP Address

NCR Back Office Pulse

User Provisioning
443 – HTTPS anywhere.ncrbackoffice.com 38.107.252.120
(for My Schedule and
Mobile Inventory)

NCR BackOffice UAT 80 - HTTP

lab.menulink.net 38.107.252.47
Application 443 - HTTPS

NCR BackOffice UAT

443 - HTTPS install.ncrbackoffice.com 38.107.252.122
Installs

NCR BackOffice UAT

443 - HTTPS ppdweb.ncrbackoffice.com 38.107.252.124
Data Service

NCR BackOffice UAT HR

443 - HTTPS lab.menulink.net 38.107.252.47
Bridge

NCR BackOffice UAT

443 - HTTPS ppdweb.ncrbackoffice.com 38.107.252.124
Anywhere

206.123.121.83
80 – HTTP content.radiantmsp.com 38.107.252.22
NCR Endpoint Protection
443 – TCP remote.radiantmsp.com 38.107.252.31
38.107.252.32

443 — TCP In/Outbound Client-RU.NCRGuestPad.com 38.107.252.68

NCR Guest Pad
443 — TCP In/Outbound Client.NCRGuestPad.com 38.107.252.67

NCR Corporation® 2016 Page 6 of 13

 NCR Aloha Network Configuration Guide

Application Program/Feature Exceptions Port/Protocol Direction URL / Purpose IP Address

ssfm.alohaenterprise.com 206.123.121.88
80 – HTTP
ssfm.alohaenterprise.com 38.107.252.20
443 – HTTPS
weborder.alohaenterprise.com 206.123.121.25
8082 — TCP
esinst.alohaenterprise.com 38.107.252.90
9801 – TCP
store.radiantmobileapp.com 38.107.252.90
7893 — TCP
www.radiantmobileapp.com 38.107.252.90
www.ncrpay.com 206.123.121.41
ncrpaystatus.com 23.21.213.53
*.paypal.com Resolved by DNS
crl.godaddy.com 72.167.18.237
NCR Mobile Pay* certificates.godaddy.com 72.168.18.238
IMAgent.exe crl.starfieldtech.com 72.167.239.237
*(also see NCR Mobile MPAgent.exe certificates.starfieldtech.com 72.167.239.238
Pay under Store-Side
Solutions) certificates.starfieldtech.com 188.121.36.237
certificates.starfieldtech.com 188.121.36.238
certificates.starfieldtech.com 182.50.136.237
certificates.starfieldtech.com 182.50.136.238
certificates.starfieldtech.com 50.63.243.228
certificates.starfieldtech.com 50.63.243.229
7893 — TCP
Internal BOH IMAgent
7897 — TCP
Internal BOH Mobile Pay BOH Service
7896 — TCP
Internal FOH Mobile Pay Process
7898 — TCP
Internal FOH FOH Activity Intercept
7899 — TCP
Internal FOH FOH Print Intercept

206.123.121.83
80 – HTTP content.radiantmsp.com 38.107.252.22
NCR Patch Management
443 – TCP remote.radiantmsp.com 38.107.252.31
38.107.252.32

21 – TCP
www.radiantmobileapp.com 38.107.252.90
21 – FTPS
IMAgent.exe store.radiantmobileapp.com 38.107.252.90
Pulse 443 – TCP Outbound
PulseAgent.exe www.radiantmobileapp.com 38.107.252.90
443 - HTTPS
pif.radiantmobileapp.com 38.107.252.86
9801 – TCP

NCR Corporation® 2016 Page 7 of 13

 NCR Aloha Network Configuration Guide

Application Program/Feature Exceptions Port/Protocol Direction URL / Purpose IP Address

80 – HTTP/TCP
8884 206.123.121.50
Quest
8885 – TCP thru .59
8890 – UDP

ssfm.alohaenterprise.com (data 206.123.121.88

transport) or
esinst.alohaenterprise.com (software 38.107.252.20
443 – HTTPS updates) 206.123.121.90
Restaurant Guard restaurantguard.com 206.123.121.87
80 – HTTP
ns1.alohaenterprise.com
ns2.alohaenterprise.com
root.alohaenterprise.com

Store-Side Solutions
Program/Feature Exceptions IP
Application Port/Protocol Direction URL / Purpose
Address

Aloha CAP StoreActivityRecorder.exe 8195 – TCP/ UDP Inbound Store Activity Recorder

443 TCP/ UDP Inbound Electronic Data Capture

EdcSvr.exe
Aloha EDC Internet-based credit card
Edc.exe
authorizations

NCR Corporation® 2016 Page 8 of 13

 NCR Aloha Network Configuration Guide

Program/Feature Exceptions IP
Application Port/Protocol Direction URL / Purpose
Address

49214 – UDP Inbound Base Port\Discovery

49215 – TCP Inbound Front of House
Aloha POS v7.0 and later
49216 – UDP Inbound Front of House
49217 – DCP Inbound Discovery
49218 – TCP Inbound CtlSvr
Default Base Port=49214
49219 – UDP Inbound CtlSvr
CtlSvr.exe
49221 – TCP Inbound RFS
(Configurable use Base RfsSvr
Port + 1-5, 7, 8) 49222 – UDP Inbound RFS
Iber.exe
12345 – UDP Inbound Discovery
Iberqs.exe
12346 – UDP Inbound Discovery
AlohaAlertEngine.exe
445 – TCP/UDP Inbound Front-of-House/Back-of-House
60050 – TCP Inbound RFS File Sharing
8019 – TCP Inbound Alerts Engine
9018 – TCP Inbound
1333 UDP Inbound Databus communication
135 – TCP/UDP Term to Term / Term to BOH
communication
139 – UDP/TCP DCOM for Aloha Connect (3 rd
Party)
Aloha Connect remote calls
Remote File System is part of the
Aloha POS communication
Aloha RFS RfsSvr.exe 60050 – UDP/TCP framework (override with
"RFSPORTNUMBER" in
Aloha.ini)
8899 –TCP/UDP Inbound BOH .NET remoting on site controller
7788 –TCP Inbound BOH .NET remoting on the client
8887 – TCP/UDP Inbound BOH REST services within Iber
Aloha Transaction AlohaTransactionGateway.exe 8889 – TCP Inbound BOH REST services hosted by ATG
Gateway ATGHelperService.exe 45888 – UDP Inbound BOH Service Discovery as part of
multicast group 230.134.226.241
10000 and above Inbound BOH Dynamically assigned thru .NET
Remoting

NCR Corporation® 2016 Page 9 of 13

 NCR Aloha Network Configuration Guide

Program/Feature Exceptions IP
Application Port/Protocol Direction URL / Purpose
Address

1221 – UDP FOH/BOH AK Databus Discovery Broadcast

/Multicast over 225.0.0.37
1222 – TCP FOH/BOH Kitchen Databus Communication
Broadcast/Multicast over
1333 – UDP Inbound 225.0.0.37
9090 – TCP Inbound AK Databus UDP Discovery
Aloha Kitchen AlohaKitchen.exe Default Kitchen service port
9088 – TCP Inbound Broadcast /Multicast over
11011 – UDP Inbound 225.0.0.37
13555 – TCP Inbound Default Kitchen Interface port
14770 – TCP Inbound AK Broadcast Mgr Discovery Port
AK File Sharing port
BOH AK Instance
37420 — TCP Port to connect to the Aloha
Aloha Licensing 37421 — TCP Licensing server.

80 – TCP System Center

5353 – UDP System Center
5656 – UDP System Center
7004 – UDP System Center
7787 – TCP Inbound Aloha Transaction Gateway
7788 – TCP Inbound Aloha Transaction Gateway
8896 – TCP iOS communication
8897 – TCP iOS communication
Aloha Mobile*
8898 – TCP Inbound Aloha Mobile Monitor
8899 – TCP Aloha Mobile Monitor
*Aloha Mobile Versions
12.1.7 - Current 1024-65535 TCP OM 7 communication (in cradle)
24999 – TCP Orderman7/SOL communication
25000 – UDP Orderman7/SOL communication
7005 – TCP Orderman7 communication
7017 – TCP Orderman7 communication
10000 – TCP OM7 Base station4
22 – TCP communication
OM7 Multi-SvcCradle
communication

NCR Corporation® 2016 Page 10 of 13

 NCR Aloha Network Configuration Guide

Program/Feature Exceptions IP
Application Port/Protocol Direction URL / Purpose
Address

5353 – TCP Inbound Orderman Device Discovery

5353 – UDP/mDNS In/Outbound Orderman Device Discovery
System Center 2 Bonjour (service name)
80 – TCP In/Outbound Configuration UI - OMB4 and Localhost
(Orderman) scservice.exe
80 – HTTP In/Outbound OM7 Service Station Localhost
7005 – TCP Outbound Configuration of OM7
Surveillance security interface
Aloha SPY 3999 – TCP (override with "ALOHASPYPORT"
environment variable)
1478 - UDP In/Outbound ATO Databus Discovery Port
2478 - TCP In/Outbound ATO Databus Communication
8020 – HTTP/TCP Inbound Primary/Master ATO service ports
8021 – TCP Inbound
8030 - TCP In/Outbound BOH ATO-ATG/Loyalty Comm.
8040 - TCP In/Outbound FOH ATO-ATG/Loyalty Comm.
9020 – HTTP/TCP Inbound Primary/Master ATO service ports
9021 – TCP Inbound
9600 – TCP Inbound Aloha Kitchen Interface for ATO
Radiant.Hospitality.AlohaToGo.
(ATO v1.1, v1.2.19 and earlier)
Aloha Takeout exe
10550 – TCP Inbound Intercept remoting ports
ServiceHost.exe
10551 – TCP Inbound Intercept remoting ports
1221 – UDP Inbound Aloha Kitchen discovery port for
ATO (ATO v1.2.20 and later)
1222 – TCP Inbound Kitchen Databus Communication
Broadcast/Multicast over
225.0.0.37
21769 – UDP Service discovery port
32768 – HTTP/TCP In/Outbound
32769 - TCP In/Outbound Primary/Master ATO Client Ports

135 – RPC
1801 – TCP
1801 – UDP
OrderPoint! RSSEngine.exe 2101 – RPC Message Queuing
2103 – RPC
2105 – RPC
3527 – UDP

NCR Corporation® 2016 Page 11 of 13

 NCR Aloha Network Configuration Guide

Program/Feature Exceptions IP
Application Port/Protocol Direction URL / Purpose
Address

TCP/IP interface to Universal

Aloha UPI 55055 – TCP Payment Interface (override with
"REMOTEPORT" in Edc.ini)

11000 –TCP/UDP Socket Listen

Remote Auto Loader AlAdmSvr.exe 11001 –TCP/UDP Multicast Listen
(RAL) AlhAdmin.exe 11002 –TCP/UDP Multicast Send
11003 –TCP/UDP Discovery Broadcast

NCR Corporation® 2016 Page 12 of 13

 NCR Aloha Network Configuration Guide

Proxy Server Considerations

A proxy server acts as a gateway between two networks, such as a company network and the Internet. Proxies block direct acces s between networks,
which makes it much more difficult for intruders to obtain private network information. Proxies may also cache Web pages; sto ring a temporary copy locally,
which increases network performance.
In general, the Aloha Enterprise line of prod ucts allows traffic through a proxy server, without additional configuration requirements. The MenuLink
application, which is a very robust, comprehensive solution, supports proxy access with minor proxy server configuration.
MenuLink version 5.9 and later support access using key proxy configuration settings. Because the majority of MenuLink content is dynamic, and not
suitable for caching, it would be feasible to exclude MenuLink traffic from the proxy. To this end, you need to modify the In ternet Explorer proxy options to
exclude MenuLink remoting traffic.
To exclude NCR BackOffice remoting traffic from the proxy server:

1. Select Tools > Internet Options from the Internet Explorer main
menu.

2. Click the Connections tab.

3. Click LAN Settings.

4. Select the Use a proxy server for your LAN check box.
5. Click Advanced.
6. Under ‘Exceptions,’ type the URL you want to exclude from the
proxy (e.g., http://boa.menulink.net/<companyname>).
This excludes the remoting traffic from the proxy, but still allows code
updates and other essential traffic.
When you are finished making changes, click OK until you return to
Internet Explorer.

©2016 NCR Corporation – All rights reserved.

The information contained in this publication is confidential and proprietary, and may not be reproduced or disclosed to othe rs.