Firewall Configuration / Required Ports / FAQs

Jonathan

October 01, 2018 23:31

HTTP - TCP (if remote management is needed by IT)
- 80, 443
Remote - TCP
- 9527,9528,6783
VPN - TCP & UDP
- 1194, 51820
Yealink - TCP & UDP (required if using Yealink devices)
- 8443, 8445, 8446, 9090, 9989
  - Source IPs
    - 54.174.154.29, 52.5.133.228, 3.124.172.120, 52.58.53.137, 52.71.103.102, 52.29.124.181, 3.124.165.251, 52.201.1.15, 34.238.237.220, 34.235.12.107, 35.153.119.139, 18.197.64.197, 18.159.90.163, 18.194.197.13, 3.124.130.125, 20.19.104.34, 20.85.145.227, 51.11.241.228, 20.19.96.56, 20.242.144.0, 20.242.144.1

SIP ALG and SIP Inspection must be disabled completely from your firewall.
- Must be disabled at the top level of the firewall. Disabling it on a VLAN basis usually isn't enough.
If you need a list of specific source and destination IPs, please contact support.
Any questions or concerns with the ports and services we use, please contact support.
If none of these options work for you, please let us know and we can discuss an option using our SDN solution.

If your WAN network has access to multiple IPs we need 1:1 WAN setup in order to communicate properly.

SIP ALG / SIP Inspection
Content Filtering / Blocking for installation process
- We require unrestricted DNS access at the time of an on-premise install.
Double NAT
Asymmetric Firewall
- Not possible with SIP communications without utilizing our SDN service.