Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

...

Windows Feature - Needs to be installed manually through Control Panel 
NameLink
Microsoft .NET Framework 4.5.1Download LinkMicrosoft .NET Framework 3.5 (Required 4.9.3+)
Microsoft Visual C++ 2012 Redistributable (x64)Download Link
Microsoft SQL Server Compact 4.0Download Link
Microsoft SQL Server 2012 Express with Tools (SP1)Download Link
Microsoft SQL Server 2019 Express with Tools (SP1)Download Link
Microsoft Sync Framework

Download Link

Download Link (install this first)
Download Link (install this second)
Download Link (install this third)

Elasticsearch Filebeat Installer (4.9.2 Server Installers)Download Link

Manually Applied Software

NameLink
Microsoft .NET Framework 3.5 (Required for 4.9.3+)Windows feature applied through Control Panel


Network Requirements

Wireless Network

...

ProcedureDomain NameTCP Ports
Menu deployment, reporting data, etc.
  • ecmwebservices-(ecm instance name).cbsnorthstar.com
  • ecmwebservices-(ecm instance name).cbsnorthstar.net
  • nsoewebservices-(ecm instance name).cbsnorthstar.com
  • nsoewebservices-(ecm instance name).cbsnorthstar.net
443, 80
Network Time

We use NTP to verify the system clock is accurate. If you cannot allow access to the following NTP server, you must provide your own NTP server we can query. We do not change the system clock, this is for monitoring only.

  • time.nist.gov
123 (UDP)

Menu deployment, reporting data, etc.

(Azure US West datacenter)

We use Microsoft Azure's US West datacenter for various functions.
You can download a complete, updated list of potential IP addresses from Microsoft.
At the time of writing, the following domains are used:

  • azure-ecm.cbsnorthstar.net
443, 80
Web API URLs

We use various urls for our web ordering api connection. Outbound traffic from the server needs to be allowed to these endpoints.


Web Order API microservice linkhttps://services.cbsnorthstar.com/auth (4.9.4)
Northstar 3rd Party Delivery

NSOE reaches up to N3PD API to "GetOrder" by UUID in order to submit the order to the POS. 

  • Whitelist: *.chowly.com
    • Each API URL for N3PD (Aka Chowly) is unique and can be found in the site's SDF file in the "System Settings" table, tied to value "Chowly.APIUrl"
    • Example: Highlighted value is what needs to be whitelisted for the site using this integration.

443, 80


Kafka Cluster (4.9.2 Server)The Kafka cluster is used for Web Order API (WOAPI) orders and sales data routing from in-store to our cloud services.

blue-ketch-01.srvs.cloudkafka.com:9094
blue-ketch-02.srvs.cloudkafka.com:9094
blue-ketch-03.srvs.cloudkafka.com:9094
9094
NorthStar Order Entry Dependencies (4.9.2 Server Installer)

These are software dependencies that we serve on our end instead of downloading from a separate vendor.

These links need to be allowed:

Main Link(s)


All Dependencies (4.9.3 Server Build)

(Old 4.9.2 and below Server Build - The Azure link is defunct at 4.9.3)



Remote Support
  • cbsassist.com
  • bomgar.cbsassist.com
443, 80
Email Receipts
  • smtp.socketlabs.com
2525

PayPros credit/gift cards (if required)

  • etrans.paygateway.com
443
Mercury credit/gift cards (if required)
  • w1.mercurypay.com
  • w2.backuppay.com

If using Verifone terminals:

  • x1.mercurypay.com
  • x2.mercurypay.com

443

If using Verifone terminals:
9000, 9100

iJukebox Media Service (if required)
  • api.myijukebox.com
  • images.musicnet.com
  • fp-limelight.musicnet.com

443, 80


N-able RMM Agent
  • rmm.cbsnorthstar.com - 3.142.71.16
443,80
Filebeat log shipper

5043


PAX Connections



PAX Store Configuration URLt.paxstore.us9080

BroadPOS Configuration URL

t.broadpos.com

9120

PAX FDMS
Primary Authorization URL

prod.dw.us.fdcnet.biz/sd/srsxml.rc

443

PAX FDMS
BroadPOS Configuration URL


t.broadpos.com


9120

PAX TSYS (TC-Sierra)
Primary Authorization URL
Secondary Authorization URL 

ssl2.vitalps.net
ssl3.vitalps.net 

5003
5003 

PAX TSYS - TransIT (HC)

Primary Authorization URL


gateway.transit-pass.com


443

PAX TSYS
BroadPOS Configuration IP


40.128.76.76


9020

PAX Heartland
Primary Authorization URL
Primary Authorization IP 

api2.heartlandportico.com
65.118.49.55 

443
PAX Heartland
BroadPOS Configuration IP 
184.73.218.146 

PAX Shift4

Primary Authorization URL


utg.shift4api.net


443

PAX WorldPay Vantiv 

Primary Authorization URL


PROD.SSL53.COM


443

Internal Connections

These connections are made WITHIN the local area network where Order Entry is running. The installation will create rules in the Windows Firewall to accommodate. If you are using a firewall that restricts access within the LAN, these ports must be unblocked.

...