Security and Firewall Requirements

1.0 Introduction - Firewall Requirements

Pixellot’s Live Streaming and VOD services require specific Firewall Requirements, which the IT Department will configure.  

1.1  Firewall Definitions:

Allowed Domains	Ports
*.pixellot.stream	443-TCP 443-UDP 1935-TCP 2088-UDP
*.pixellot.tv	443-TCP with support of HTTP CONNECT
*.amazonaws.com	443-TCP

For Customer that would like to add VAS of type “Overlay Provider”, the domain of the used VAS should be whitelisted as well.

Additional Ports	Ports
Locally supplied working DNS service	53-TCP/UDP
NTP	123-UDP

1.2 Network Segmentation

Pixellot venue systems are closed, single-purpose appliances. They must be

installed on a dedicated VLAN or an isolated network segment, separated from:

- Public, guest and visitor networks, including guest Wi-Fi

- General-user networks used by staff, members, students or other occupants

- Administrative, business and payment systems

- Any network segment carrying unmanaged or personally owned devices

Routing from these networks to the venue system segment must not be permitted.

Note: Installing the system on a shared or general-access network removes the

primary network control the system relies on, and exposes its management

interfaces to any device on that network.

1.3 Inbound Connections

The venue system does not require any inbound connection from the venue network

in order to operate.

All communication with Pixellot services is outbound and is initiated by the

system itself, using the domains and ports listed in section 1.1. Inbound

connections from the local network to the venue system may therefore be blocked

without affecting streaming, recording, production or remote management.

Where the network supports it, Pixellot recommends restricting device discovery

and scanning traffic from general-user networks to the venue system segment.

The venue system is delivered with a minimal service footprint. Windows Defender

Firewall is enabled and denies inbound connections by default. Only the ports

required by the Pixellot software are permitted, and these rules are applied by

the Pixellot installer as part of the standard system configuration.

1.4 System Access and Remote Management

The venue system requires no local interaction to run. In normal operation it is

installed with no keyboard, no mouse and no monitor attached. Peripherals are

used only during installation, or during on-site service by a Pixellot-authorised

technician, and are removed at the end of that activity.

Remote access to a venue system is permitted through authorised channels only:

- The Pixellot ecosystem (Pixellot CMS and the Pixellot management services)

- LogMeIn (LMI), a third-party remote access platform authorised for use on

  Pixellot systems

Access through these channels is limited to named users authorised by Pixellot.

Remote-access tools other than those listed above must not be installed on, or

used to reach, a venue system.

Customers and venue staff manage their systems through the Pixellot CMS and the

Pixellot applications. Direct operating-system level access to the venue system

is not part of the product and is not required for any customer workflow.

1.5 Integrated Wireless Access Point

The venue system includes an integrated wireless access point. Its sole

authorised purpose is to provide a direct local connection for the Pixellot

Connect application during installation, configuration and service.

The integrated access point must not be used as a general-purpose wireless

network. Specifically, it must not be used to:

- Provide Wi-Fi or internet access to phones, tablets, laptops or any other

  general-purpose device

- Connect devices unrelated to the operation of the venue system

- Bridge other devices onto the venue network or onto the venue system

Note: Any device that joins the integrated access point shares a network segment

with the venue system. Using it as a general-purpose wireless network therefore

bypasses the network segmentation required in section 1.2, and places the

system's management interfaces within reach of unmanaged devices.

About Pixellot

Pixellot offers automated sports production solutions that provide affordable alternatives to traditional video capture, production, and distribution systems for professional and semi-professional sports events. Founded in 2013, Pixellot’s AI technology solution streamlines production workflow by deploying an unmanned multicamera system in a fixed location, with additional angles as required, to cover the entire field, offering a stitched panoramic image. Advanced algorithms enable automatic coverage of the flow of play and generate highlights. Pixellot systems are deployed by broadcasters, production companies, clubs, federations, universities, high schools, sports portals, and coaching solution providers around the globe.

For more information visit: www.pixellot.tv

Legal Notice

This document contains proprietary and confidential material of Pixellot Ltd. Any unauthorized reproduction, use, or disclosure of this material, or any part thereof, is strictly prohibited. This document is solely for the use of Pixellot employees and authorized Pixellot customers.

The material furnished in this document is believed to be accurate and reliable. However, no responsibility is assumed by Pixellot Ltd. for the use of this document or any material included herein. Pixellot Ltd. reserves the right to make changes to this document or any material included herein at any time and without notice. 

For more information visit: www.pixellot.tv 

Copyright © 2022 Pixellot Ltd.

All Rights Reserved.

• Related Articles

• NanoStation M2 Installation - P2P (Point to Point)

  About Pixellot Pixellot offers automated sports production solutions that provide affordable alternatives to traditional video capture, production, and distribution systems for professional and semi-professional sports events. Founded in 2013, ...

• S2 Installation Guide

  About Pixellot Pixellot offers automated sports production solutions that provide affordable alternatives to traditional video capture, production, and distribution systems for professional and semi-professional sports events. Founded in 2013, ...

• S3 Installation

  1.0 Introduction - S3 Installation Pixellot S3 offers automated production of sports videos. Based on Pixellot's patented, fully automated end to end production workflow, Pixellot S3 generates and delivers TV-like footage without a person in the ...

• OCR-Scoreboard Kit

  About Pixellot Pixellot offers automated sports production solutions that provide affordable alternatives to traditional video capture, production, and distribution systems for professional and semi-professional sports events. Founded in 2013, ...

• Site Survey

  About Pixellot Pixellot offers automated sports production solutions that provide affordable alternatives to traditional video capture, production, and distribution systems for professional and semi-professional sports events. Founded in 2013, ...