Network Readiness Guidelines

UDP Port	Description
10000–65535 Note: Recommended for best user experience.	Allowlisting this range of ports gives users the best experience. NextGen Healthcare recommends this setting for the best quality audio and video. In this case, clients make a direct connection to media servers and send media data over UDP.
3478	If UDP port 3478 is open, media data can flow through Traversal Using Relays around NAT (TURN) UDP. This is a step above TCP. However, an additional server is required to relay packets. This can introduce latency and/or connectivity issues.

NextGen Virtual Visits™ Help

Setting Firewall and Proxy Configurations to Prevent Video Blocking

The NextGen Healthcare Web Real-Time Communication (WebRTC) service provider requires access to specific User Datagram Protocol (UDP) ports for the best video and audio experience. You must open the Transmission Control Protocol (TCP) port 443 by changing your firewall settings. To ensure optimal video and audio quality, you must also do one of the following. Open UDP ports 10000–65535 to all inbound and outbound traffic. These ports permit WebRTC to establish direct connections to media servers and minimize lag and latency by bypassing relays. Note: Video and audio streams are encrypted using DTLS 1.2/SRTP. Open UDP port 3478 if it is not feasible to open all UDP ports on your network. This approach allows media data to flow through Traversal Using Relays around NAT (TURN) UDP. This is a step above TCP. However, an additional server is required to relay packets. This approach can introduce latency and/or connectivity issues. To allow video visits for your practice, you may need to adj

NextGen Virtual Visits™ Help

Prerequisites for Using NextGen Virtual Visits™

For a successful visit with NextGen Virtual Visits™, all users must have the following: A strong internet connection, preferably a wired connection. For local network or router configuration, you can set the Quality of Service (QoS) priority high for telehealth sites to optimize video streaming. A supported device with a working front-facing camera, microphone, and speakers. Ensure that your device is using the latest supporting operating system For a Universal Serial Bus (USB) webcam, ensure that your webcam is connected to a high-speed USB 2.0 port. Update your USB webcam's firmware and software to the latest versions. A supported browser for your device. Ensure that your browser can access the camera and microphone. Typically, the browser prompts you to turn on access. If it does not, refer to your browser's support website for more information. Firewall configurations are set to allow video visits. Supported Devices and Browsers You can use numerous devices and browsers to access N

NextGen Virtual Visits™ Help

Setting Up a Virtual Private Network

For best results, you must use the latest version of your devices and browsers. If you can only access the internet from your network through your network's proxy or virtual private network (VPN), you must use a transparent proxy or configure it in your browser for Hypertext Transfer Protocol Secure (HTTPS) connections. Web Real-Time Communication (WebRTC) does not support proxies requiring authentication. Additionally, browsers may have the following rules: Google Chrome™ - The latest versions provide full support for authentication. Mozilla Firefox® - Does not support Traversal Using Relays around NAT (TURN) over Transport Layer Security (TLS), or proxies that inspect packets to validate that connections are real TLS. Apple Safari® - Supports WebRTC in Safari on iOS 11. Safari 12.1 also supports the VP8 video codec, in addition to the H.264 codec. Safari versions earlier than 12.1 use the H.264 video codec exclusively and therefore do not support the VP8 video codec. Note: The NextGe

NextGen Virtual Visits™ Help

Request Network Support Assistance

You can submit network support requests for NextGen Virtual Visits™ by visiting NextGen Healthcare Success Community. Log on to NextGen Healthcare Success Community and submit a NextGen Healthcare Support case under Virtual Visits Network.In the support request, include your answers to the following questions: Has anything changed since your initial implementation of NextGen Virtual Visits™ at your site? How many overall locations will be used, and can NextGen Healthcare verify the configurations at all locations? How many users at each location will be using NextGen Virtual Visits™ at the same time? What types of devices will your practice use to connect? Is the connection wired or wireless? If wireless, is it through cell phone service or local Wi-Fi®? How are NextGen Healthcare solutions accessed by these users (RDP, thin clients, thick clients, and so on)? Will providers access NextGen Healthcare solutions using the same device they use for their NextGen Virtual Visits™? To perform

NextGen Virtual Visits™ Help

Testing Your Device and Internet Connection

To ensure the best virtual visit experience, you must test your device compatibility and internet connection speed. You can test your device and browser compatibility by visiting the website https://virtualvisits.nextgen.com/video/test and then following the provided instructions. NextGen Healthcare recommends a speed of 2 to 4 Mbps for each session. For example, if you plan on 15 sessions, you must have a 30 to 60 Mbps network speed to support all your users simultaneously at the same location. You can calculate your total network capacity needed for download and upload. For example, 10 users @ 2 to 4 mb/s require 20 to 40 mb/s concurrent upload speed as the minimum requirement in a shared network. The 20 to 40 mb/s speed, along with other upload capacity needs, will be your total upload capacity requirement. Note: To use screen sharing during virtual visit sessions, you should also consider the potential added session traffic created by other features, such as guests, clinical admini

Mirth® Appliance by NextGen Healthcare Deployment Guide, 4.1

Opening Network Ports Through a Firewall

When operating a Mirth® Appliance by NextGen Healthcare through a firewall or other device performing access control, it is necessary to allow some network traffic so that certain features can function. Traffic Direction Port Protocol Service Note Out 80 tcp Software Update Can be restricted to mirthhq.mirthcorp.com. Out 443 tcp Software Update Can be locked down to mirthhq.mirthcorp.com. Out 25 tcp Mail Delivery Not necessary if you use a mail relay behind the firewall. Out 123 udp NTP (time) Not necessary if you use an NTP server behind the firewall. In 80 tcp Control Panel Only necessary to open if you perform administration through the firewall. An alternative is to use VPN service. In 8080, 8443 tcp Mirth Only necessary to open if you perform administration through the firewall. An alternative is to use VPN service. Out 53 tcp DNS Not necessary if there is a local DNS server behind the firewall. In 1194 udp VPN This is the default value. Can be changed. Only necessary if you use t

Network Readiness Guidelines

Recommendations

Setting Firewall and Proxy Configurations to Prevent Video Blocking

Prerequisites for Using NextGen Virtual Visits™

Setting Up a Virtual Private Network

Request Network Support Assistance

Testing Your Device and Internet Connection

Opening Network Ports Through a Firewall

Network Readiness Guidelines

Setting Firewall and Proxy Configurations to Prevent Video Blocking

Prerequisites for Using NextGen Virtual Visits™

Setting Up a Virtual Private Network

Request Network Support Assistance

Testing Your Device and Internet Connection

Opening Network Ports Through a Firewall