Which Network Ports Does Forensic Email Collector Use?
Forensic Email Collector uses the following network ports:
| Port | Reason |
|---|---|
| 443/UDP, TCP | Exchange Web Services, Graph API, and Gmail API connections to target mailboxes. |
| 143,993/TCP | IMAP4 connections to target mailboxes. Certain IMAP servers may require custom ports. |
| 110,995/TCP | POP3 connections to target mailboxes. Certain POP3 servers may require custom ports. |
| 80/UDP, TCP | HTTP connections to resources such as FEC’s help documentation and activation of soft licenses. |
| 25,465,587/TCP | SMTP connections to relay servers for email notifications. This is optional and is only needed if the end-user configures email notifications to be sent at the end of an acquisition. Certain SMTP servers may require custom ports. |
| 53/UDP, TCP | DNS requests to resolve domain names. |
A quick way to check if the needed network ports are open on your network is to use FEC's built-in Port Tester as in the screenshot below:
