To ensure your devices can communicate properly with Triton Cloud, please configure your firewall settings as follows:
Destination Address Ports
--------------------------- -------------------
*.tritonsensors.com 80, 443
iot.tritonsensors.com 80, 443, 8883
iot-manage.tritonsensors.com 80, 443
ws-manage.tritonsensors.com 80, 443
iot.us-east-1.amazonaws.com 80, 443
a74q90bfrqebt-ats.iot.us-east-1.amazonaws.com 80, 443, 8883
triton-production-cloud.s3.us-east-1.amazonaws.com 80, 443
https://ws.tritonsensors.com/ 80, 443
Only outbound ports need to be opened.
No inbound ports are required for standard device operation.
If your firewall uses web filtering or SSL inspection, create an exception (allow list) for the domains listed above to avoid connection issues.
If a device is not connecting after some time, check that your DNS filtering is not blocking any Triton-related domains. Even if firewall ports are open, DNS blocks can prevent the device from reaching the cloud.
Triton Sensors devices default to using Google's public DNS server (8.8.8.8).
Please ensure your network allows access to this DNS server.
If your environment blocks external DNS (like 8.8.8.8), you may need to allow DNS passthrough or reconfigure locally.
If you use Cisco Meraki switches, they could be classifying the traffic as "tobacco" and thus blocking it.
Triton Sensors devices operate using two different architectures:
No local interface — these devices cannot be accessed by IP address.
All setup and management is done via the Triton Cloud.
If a device appears offline, it’s almost always due to network connectivity or firewall issues.
Can be accessed locally by IP (via browser).
Default username: admin
Default password: Triton0520! (sometimes 111111)
Also connects to Triton Cloud via MQTT over a secure AWS-backed infrastructure.
Allows more direct troubleshooting but still relies on firewall access for cloud connection.
Triton Pro / 3D Sense → Cloud-only
Triton ULTRA → On-prem + cloud
For Triton Pro & 3D Sense (Cloud-Only Devices)
Power cycle the device. (Unplug and replug the device or PoE cable.)
Ensure firewall settings are correct (see below).
You cannot access these devices by IP, so firewall configuration is critical.
If the firewall is blocking outbound traffic, the device will not register or show online.
For Triton ULTRA (Hybrid Devices)
If device is accessible via IP address but shows offline in cloud:
This strongly indicates a firewall or DNS issue.
Double-check firewall rules and DNS configuration (details below).
Some devices may appear online while others are blocked — this is often due to per-port or VLAN-specific filtering.
Additional Requirements:
Only outbound traffic is needed — no inbound ports required.
Disable SSL inspection or web filtering for above domains.
Allow DNS access to 8.8.8.8 (or configure a compatible internal DNS if needed).
Check content filters or web proxies that may block or delay MQTT/websockets.
“Some devices are working, so the firewall must be fine.”
Not always. Network appliances often apply different rules to different devices based on:
MAC address
IP range/subnet
Switch port or VLAN
Device behavior (MQTT/websocket traffic)
Even one blocked domain can prevent a device from appearing online in the cloud.
Please collect the following and send it to our support team:
MAC Address of the device
Confirmation of firewall rules (or screenshots of rules/logs)
Whether the issue is happening on just one device or all devices
If you are able to ping the device locally
Triton Support:
P: 800-305-1617