{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-products/sws/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"SWS Firewall Rules Documentation","description":"Integration and usage documentation.","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"sws-firewall-rules-documentation","__idx":0},"children":["SWS Firewall Rules Documentation"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"table-of-contents","__idx":1},"children":["Table of Contents"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#introduction"},"children":["Introduction"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#inbound-firewall-rules"},"children":["INBOUND Firewall Rules"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#outbound-firewall-rules"},"children":["OUTBOUND Firewall Rules"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#digital-signatures"},"children":["Digital Signatures"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#level-b-signatures"},"children":["Level B Signatures"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#level-t-signatures"},"children":["Level T Signatures"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#level-ltv-signatures"},"children":["Level LTV Signatures"]}]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#outbound-firewall-rules----apply-timestamp"},"children":["OUTBOUND Firewall Rules -- Apply Timestamp"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#outbound-firewall-rules----verify-signatures"},"children":["OUTBOUND Firewall Rules -- Verify Signatures"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"introduction","__idx":2},"children":["Introduction"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The communications required (firewall rules) to enable SWS operations"," ","depend on the type of operation performed:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Make digital signatures (PAdES, CAdES, XAdES)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Apply timestamp"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Verify digital signatures, timestamps and certificates"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"inbound-firewall-rules","__idx":3},"children":["INBOUND Firewall Rules"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To allow SWS to be contacted and used, the following rule must be"," ","enabled."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Protocol"},"children":["Protocol"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Port"},"children":["Port"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"TCP/UDP"},"children":["TCP/UDP"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Environment"},"children":["Environment"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["HTTP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["8080"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TCP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TEST, PROD"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"outbound-firewall-rules","__idx":4},"children":["OUTBOUND Firewall Rules"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"digital-signatures","__idx":5},"children":["Digital Signatures"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"level-b-signatures","__idx":6},"children":["Level B Signatures"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following communications are required."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operation"},"children":["Operation"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Protocol"},"children":["Protocol"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Port"},"children":["Port"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"TCP/UDP"},"children":["TCP/UDP"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Address"},"children":["Address"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Environment"},"children":["Environment"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Signature"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Sends a request to the Namirial server for signing the hash"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["HTTPS"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["443"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TCP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["fra.test.firmacerta.it",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"fra.firmacerta.it"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TEST",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"PROD"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Retrieve a list of trusted certificates"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Used to download all trusted root certificates"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["HTTPS"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["443"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TCP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["swsverifier.test.namirialtsp.com",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"swsverifier.namirialtsp.com"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TEST",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"PROD"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["NOTE: Communications are protected by mTLS (mutual authentication)."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"level-t-signatures","__idx":7},"children":["Level T Signatures"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Requires the same communications as Level B plus timestamp service."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operation"},"children":["Operation"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Protocol"},"children":["Protocol"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Port"},"children":["Port"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"TCP/UDP"},"children":["TCP/UDP"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Address"},"children":["Address"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Environment"},"children":["Environment"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Timestamp"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Sends request to Namirial server to apply timestamp to hash"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["HTTPS"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["443"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TCP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["timestamp.test.firmacerta.it",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"timestamp.firmacerta.it"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TEST",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"PROD"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"level-ltv-signatures","__idx":8},"children":["Level LTV Signatures"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Requires the same communications as Level B plus certificate validation"," ","services."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operation"},"children":["Operation"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Protocol"},"children":["Protocol"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Ports"},"children":["Ports"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"TCP/UDP"},"children":["TCP/UDP"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Address"},"children":["Address"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Environment"},"children":["Environment"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Verification using OCSP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["For validate the certificate send request to OCSP for check the certificate"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["OCSP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["80"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TCP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["ocsp.test.firmacerta.it",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"ocsp.test.namirialtsp.com",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"ocsp.firmacerta.it",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"ocsp.namirialtsp.com"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TEST",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"PROD"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Validation using CRL"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["For validate the signature certificate check the serial number into CRL"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["HTTP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["80"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TCP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["crl.test.firmacerta.it",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"crl.test.namirialtsp.com",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"crl.firmacerta.it",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"crl.namirialtsp.com"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["TEST",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"PROD"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["level LT signatures"]},", the comunications required are all above and VERY IMPORTANT → if you are signing file already signed from thirdparty company, the comunication outgoing, must be opened worldwide (because is not possible to know the CRL/OCSP endpoint of all CA and they can change also)"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"outbound-firewall-rules----apply-timestamp","__idx":9},"children":["OUTBOUND Firewall Rules -- Apply Timestamp"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use the same firewall rules required for:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Level B signatures"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Level T signatures"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"outbound-firewall-rules----verify-signatures","__idx":10},"children":["OUTBOUND Firewall Rules -- Verify Signatures"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To verify:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Digital signatures"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Timestamps"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Certificates"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use the same rules required for Level B signatures."]}]},"headings":[{"value":"SWS Firewall Rules Documentation","id":"sws-firewall-rules-documentation","depth":1},{"value":"Table of Contents","id":"table-of-contents","depth":2},{"value":"Introduction","id":"introduction","depth":2},{"value":"INBOUND Firewall Rules","id":"inbound-firewall-rules","depth":1},{"value":"OUTBOUND Firewall Rules","id":"outbound-firewall-rules","depth":1},{"value":"Digital Signatures","id":"digital-signatures","depth":2},{"value":"Level B Signatures","id":"level-b-signatures","depth":3},{"value":"Level T Signatures","id":"level-t-signatures","depth":3},{"value":"Level LTV Signatures","id":"level-ltv-signatures","depth":3},{"value":"OUTBOUND Firewall Rules -- Apply Timestamp","id":"outbound-firewall-rules----apply-timestamp","depth":1},{"value":"OUTBOUND Firewall Rules -- Verify Signatures","id":"outbound-firewall-rules----verify-signatures","depth":1}],"frontmatter":{"seo":{"title":"SWS Firewall Rules Documentation"}},"lastModified":"2026-03-23T10:44:53.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/sws/enterprise_documentation/networkguide","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}