AWS workspaces documentation change

Service: workspaces · 2026-05-28 · Documentation low

File: workspaces/latest/adminguide/workspaces-port-requirements.md

Summary

Added client firewall requirements for PCoIP streaming ports 50002/55002 UDP

Security assessment

The change documents network configuration requirements to prevent connection issues (black screens). While firewall-related, it addresses functional connectivity rather than security vulnerabilities or features. No evidence of security incident being addressed.

Diff

diff --git a/workspaces/latest/adminguide/workspaces-port-requirements.md b/workspaces/latest/adminguide/workspaces-port-requirements.md
index c5cddb429..3c4aabb2f 100644
--- a//workspaces/latest/adminguide/workspaces-port-requirements.md
+++ b//workspaces/latest/adminguide/workspaces-port-requirements.md
@@ -50,0 +51,7 @@ For PCoIP WorkSpaces, the desktop client applications do not support the use of
+Ports 50002 and 55002 (UDP)
+    
+
+The PCoIP client initiates outbound UDP communication on ports 50002 and 55002 for streaming. Ensure that the client's local firewall or network allows outbound UDP traffic on these ports. If outbound UDP on ports 50002 and 55002 is blocked on the client side, users may experience a black screen when connecting to their WorkSpaces.
+
+If your firewall uses stateful filtering, return traffic on ephemeral ports 50002 and 55002 is automatically permitted. If your firewall uses stateless filtering, you must open ephemeral ports 49152–65535 to allow return communication.
+
@@ -910,2 +916,0 @@ The following ports must be open on the management network interface of all Work
-  * Outbound UDP on ports 50002 and 55002. This is used for streaming. If your firewall uses stateful filtering, the ephemeral ports 50002 and 55002 are automatically opened to allow return communication. If your firewall uses stateless filtering, you must open ephemeral ports 49152 - 65535 to allow return communication.
-