We have a PS4 we want to setup, I don 't want to turn on UpnP, is there a way to go around this ...

[G+_Rich Mclean]

We have a PS4 we want to setup, I don't want to turn on UpnP, is there a way to go around this and still get the experience of playing online. I've read I can open some ports but I'm always been hesitant of messing around with the router's advance settings. ISP is Spectrum ( not sure if this makes a difference or not). Any step by step instructions I can use will be very much appreciated. TY

[G+_Black Merc]

The only special thing UPNP does is let your devices change the firewall rules reguarding ports. Normally that would be ok but, let a bad piece of code(malware) or some portable (already compromised) hardware on your side of the firewall and your data will flow out to wherever through the holes that get made... Without you having a say.

[G+_Rich Mclean]

Absolutely, I'm not in favor of turning on UPNP, but what are other options to play games online with the PS4?

[G+_Ben Reese]

Portforward.com is a great resource for knowing what ports applications or devices need. They also have instructions for most popular routers.

 

https://portforward.com/networking/static-ip-ps4/default.htm

 

You'll want to start with a static IP on the PS4 - one outside of your DHCP range.

The ports they have listed are...

TCP: 80, 443, 1935, 3478-3480

UDP: 3478-3479

 

Honestly, the 80 and 443 seem odd to me. I'd try it without those first. And I was just reading on a forum that some games may require additional ports, but those should be easy enough to add later if needed.

[G+_Rich Mclean]

Thanks Team

[G+_Rich Mclean]

Is it better to do a port forwarding or DMZ in terms a security?

[G+_Ben Reese]

Rich Mclean port forwarding is safer. DMZ tells the router to send all unknown traffic to that device. So, even though your PS4 may not have an SMB file server running, you're still sending inbound traffic on port 445 to the PS4's IP. If for some reason an unpatched Windows 7 machine grabs that IP and is running Windows file and print sharing, you'd get hit with Wanna Cry.

 

With port forwarding, you'd only be at risk if that Windows 7 machine was running a web server (unlikely) or some other service on 3478-3480.

 

DMZ is good for small tests where you know there's little risk (and you're ok with the risk).

[G+_Rich Mclean]

Thanks Ben