Security alert from job due to traffic on UDP8555

Configuration
,
1

This morning I received an alert from my companies IT department that my computer had initiated an outbound connection to my base domain on a port they did not expect. The only connection I had was my dashboard and I was just viewing it not doing anything that I could come up with that would generate this traffic.

I was able to determine it was WebRTC for my security cameras but as I do not access the cameras directly and only through home assistance I was confused as to why my dashboard would be trying to communicate to the public IP address/base domain on that port.

I am using Reolink cameras and they are run through Frigate. I have my dashboard accessible at a sub domain passed through a reverse proxy running directly on my firewall. My HA instance is fully up to date.

While I explained it away this time I would like to avoid triggering such alerts if at all possible.

Thanks
Susan

2

Port 8555 is the default port. Review this Live View | Frigate

Check out section WebRTC extra configuration:

WebRTC can bypass your HA system altogether when streaming the cam.

See here

  • When you use Home Assistant, Frigate, Nginx, Nabu Casa, Cloudflare, and other software, they are only involved in establishing the connection; they are not involved in transferring media data