Above is NCR's recommended network configuration for a small office providing face to face payment options using an IP based EMV card reader.
Please coordinate with your technical staff to obtain IP address allocations inside your office network. This configuration may require additional network cabling to each potential card reader location.
One IP address is required for each reader, addresses must be configured in static mode. The card readers and PCs will require outbound TCP port 443, UDP port 53, and port 9120 for outbound communication, your local firewall network support will need to ensure this traffic is allowed.
Port 10009 should allow both inbound and outbound communications both on the credit card device and on the PC’s that will be communicating with the credit card devices.
To comply with PCI best practices these computers and card reader devices should be on their own network segment. These devices are PCI PTS compliant. In most environments, this will allow you to do an annual SAQ B-IP for the network segment that these devices are attached to.
Outbound Traffic Considerations and Troubleshooting:
If a network prohibits outbound traffic, the following addresses need to be allowed:
- 162.159.129.43
- 162.159.130.43
- https://gateway20.jetpay.com/jetpay
- https://gateway17.jetpay.com/jetpay
- t.broadpos.com (current DMS for Pax devices)
- t.paxstore.us (DMS used by new Pax devices and device applications)
