Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updated WebRTC destination media ports to ephemeral range

Firewall configuration

In this section

Table of Contents
minLevel3

Version history


Expand
titleExpand | Collapse

Change History



Note
titleAbout this page
  • You must read this entire section to ensure that you configure your firewall correctly.
  • Inbound and outbound traffic terminology:
    • Inbound describes traffic from VCC.
    • Outbound describes traffic to VCC.

We recommend adding the appropriate URLs and IP addresses to any firewall rules that restrict employee access, and we request that you treat Vonage Contact Center as a business-critical application. By this, we mean optimizing and prioritizing IP traffic to Vonage Contact Center over other non-critical traffic. This is to ensure real-time responses to agent requests are processed in a timely and efficient manner (call steering buttons, call transfers, hold requests, and so on).

...

SFTP access to call recordings requires TCP port 2244044.

Inbound

All inbound traffic requires access to destination TCP port 443 (HTTPS) on our servers to establish a connection. Responses are sent to a range of ephemeral ports.

...

Using URL allowlisting (recommended)

Add Depending on whether you will use wildcard or fully qualified domain names, add the following URLs to your allowlist:

You must also add the IP addresses specified in the following sections to your allowlist:

Insert excerpt
_ExcerptEssentialFirewallConfig
_ExcerptEssentialFirewallConfig
nopaneltrue

WebRTC traffic

Insert excerpt
_ExcerptWebRTCFirewallConfig
_ExcerptWebRTCFirewallConfig
nopaneltrue

Webhooks API traffic

Insert excerpt
_ExcerptWebhooksFirewallConfig
_ExcerptWebhooksFirewallConfig
nopaneltrue

...

Using IP allowlisting

If your firewall does not support URL or DNS allowlisting, add the following IP addresses for your region to any existing firewall permissions.

Insert excerpt
_ExcerptEssentialFirewallConfig
_ExcerptEssentialFirewallConfig
nopaneltrue

Outbound VCC traffic

Info
titleOutbound IP addresses
Outbound IP addresses are used for standard web access, for example, agents and supervisors accessing Vonage Contact Center applications. All customers will need to allow outbound IP addresses.

If your firewall does not support URL/DNS allowlisting, add the following IP addresses for your region to any existing firewall permissions:

...

35.178.30.136
3.11.193.198
3.126.22.243
3.121.175.40

...

--Amazon Web Services (AWS)

Most of VCC uses Amazon Web Services (AWS).

...

VCC regionAWS region IDAWS region name
EMEA

eu-central-1Frankfurt

eu-west-2London
USANAM

us-east-1North Virginia

us-west-1North Californiaus-west-2Oregon
APAC

ap-southeast-1Singapore

ap-southeast-2Sydney

...


--

...

Adobe Analytics

Add the IP addresses specified in the following page to any existing firewall permissions: https://experienceleague.adobe.com/docs/analytics/technotes/ip-addresses.html?lang=en

--Amplitude

Add the IP addresses specified in the following page to any existing firewall permissions:

--Cloudfront

Add the IP addresses specified in the following page to any existing firewall permissions:

...

Note
titleInbound addresses
The IP addresses are all inbound outbound addresses.

--NewRelic

Add this range of IP addresses—162.247.240.0/22—to any existing firewall permissions.

Note
titleInbound addresses
The IP addresses are all inbound outbound addresses.

--WebRTC traffic

Insert excerpt
_ExcerptWebRTCFirewallConfig
_ExcerptWebRTCFirewallConfig
nopaneltrue

--Webhooks API traffic

Insert excerpt
_ExcerptWebhooksFirewallConfig
_ExcerptWebhooksFirewallConfig
nopaneltrue