Skip to content

Network Ports Used by FEC

Forensic Email Collector (FEC) uses the following network ports:

PortReason
443/UDP, TCPExchange Web Services (EWS), Microsoft Graph API, and Gmail API, Drive API, Calendar API connections to targets.
143,993/TCPIMAP4 connections to target mailboxes. Certain IMAP servers may require custom ports.
110,995/TCPPOP3 connections to target mailboxes. Certain POP3 servers may require custom ports.
80/UDP, TCPHTTP connections to resources such as FEC’s help documentation and activation of soft licenses.
25,465,587/TCPSMTP connections to relay servers for email notifications. This is optional and is only needed if the end-user configures email notifications to be sent at the end of an acquisition. Certain SMTP servers may require custom ports.
53/UDP, TCPDNS requests to resolve domain names.

A quick way to check if the needed network ports are open on your network is to use FEC’s built-in Port Tester as in the screenshot below:

Port Tester