Home/ System Setup/ Firewall and Network Configuration

Firewall and Network Configuration

Use these steps to configure Windows Firewall and network settings so ProPay can connect to the internet for license validation, software updates, email, and electronic filing.

Allow ProPay Through Windows Firewall

Windows 10 and Windows 11

  1. Open Settings > Privacy & Security > Windows Security
  2. Click Firewall & Network Protection
  3. Click Allow an App Through Firewall
  4. Click Change Settings (requires administrator access)
  5. Click Allow Another App
  6. Click Browse and navigate to C:\PAYSOFT\PROPAY26
  7. Select PAY2026.EXE and click Open
  8. Click Add
  9. Make sure both Private and Public checkboxes are selected for PAY2026
  10. Click OK to save

Windows Server 2019 and Windows Server 2022

  1. Open Server Manager > Tools > Windows Defender Firewall with Advanced Security
  2. In the left pane, click Inbound Rules
  3. Click New Rule in the right pane
  4. Select Program and click Next
  5. Select This Program Path and browse to C:\PAYSOFT\PROPAY26\PAY2026.EXE
  6. Click Next, select Allow the Connection, and click Next
  7. Check all profiles (Domain, Private, Public) and click Next
  8. Name the rule ProPay Payroll and click Finish

> Tip: If you run ProPay on a terminal server (Remote Desktop Services), the firewall rule on the server is what matters. Client machines connecting via Remote Desktop do not need separate ProPay firewall rules.

Required Network Access

ProPay connects to the following services over the internet. If your network uses a hardware firewall or proxy server, make sure these destinations are reachable.

Service Destination Port Protocol Purpose
License Validation dev2.proclock.com 3307 TCP (MySQL) Verifies your ProPay license is active
License DNS ils.paysoft.com 443 HTTPS License server name resolution
Software Updates paysoft.com 80/443 HTTP/HTTPS Downloads ProPay updates
Email (SMTP) Your SMTP server 25, 587, or 465 TCP Sends emails from ProPay
Email (OAuth2) accounts.google.com, login.microsoftonline.com 443 HTTPS Gmail or Office 365 authentication

> Note: The email port depends on your email provider settings. Configure your SMTP port in ProPay under E-Mail > Account Setup.

Configure DNS Settings

ProPay accesses ils.paysoft.com and dev2.proclock.com when validating licenses. A DNS server translates these domain names to IP addresses. Incorrect DNS settings prevent license validation.

Common DNS Problem

Many networks use the router's IP address as the DNS server. With some ISPs, this configuration does not reliably resolve all domain names.

Fix DNS Settings in Windows 10/11

  1. Open Settings > Network & Internet > Advanced Network Settings
  2. Click More Network Adapter Options (or open Control Panel > Network and Sharing Center > Change Adapter Settings)
  3. Right-click your network adapter (Ethernet or Wi-Fi) and select Properties
  4. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties
  5. Select Use the Following DNS Server Addresses
  6. Enter your ISP's DNS server address, or use a public DNS service:
    • Google DNS: 8.8.8.8 (preferred) and 8.8.4.4 (alternate)
    • Cloudflare DNS: 1.1.1.1 (preferred) and 1.0.0.1 (alternate)
    1. Click OK to save

    DNS on Windows Server with Active Directory

    If your network has a Windows Server running Active Directory Domain Services:

    • All workstations should use the domain controller's IP address as their preferred DNS server
    • The domain controller must have a DNS forwarder configured to reach external domains (ils.paysoft.com, dev2.proclock.com)
    • Verify the forwarder works by running `nslookup ils.paysoft.com` from the server

    To check DNS forwarders on the domain controller:

    1. Open Server Manager > Tools > DNS
    2. Right-click your server name and select Properties
    3. Click the Forwarders tab
    4. Verify at least one external DNS server is listed (e.g., 8.8.8.8)

    Testing Connectivity

    If ProPay cannot validate your license or connect to the internet, run these tests from a command prompt on the ProPay machine:

    1. Test DNS resolution:

    _CODE_BLOCK_0_ Both should return an IP address. If they fail, check your DNS settings.

    1. Test network connectivity:

    _CODE_BLOCK_1_ You should see replies. If not, check your firewall and internet connection.

    1. Test the license port:

    _CODE_BLOCK_2_ If the connection opens (you see a response), the port is accessible. If it times out, port 3307 is being blocked by a firewall.

    > Note: The `telnet` command may not be installed by default. To enable it, go to Settings > Apps > Optional Features and add Telnet Client.

    Troubleshooting

    Problem Solution
    License validation fails but internet works Port 3307 may be blocked. Ask your network administrator to allow outbound TCP traffic to dev2.proclock.com on port 3307.
    "DNS could not resolve" errors Change your DNS server to a public DNS (8.8.8.8 or 1.1.1.1). See DNS settings above.
    ProPay blocked after Windows update Windows updates can reset firewall rules. Re-add PAY2026.EXE to the allowed apps list.
    Email sending fails Verify your SMTP port (25, 587, or 465) is not blocked. Many ISPs block port 25 — use port 587 with STARTTLS instead.
    ProPay works on one PC but not another Each PC needs its own firewall exception for PAY2026.EXE. On networks with a shared firewall, the exception must be added there as well.

    Related Topics

    ← Back to Index