Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updated WebRTC destination media ports to ephemeral range

Firewall configuration

In this section

Table of Contents
minLevel3

Version history


Expand
titleExpand | Collapse

Change History



Note
titleAbout this page
  • You must read this entire section to ensure that you configure your firewall correctly.
  • Inbound and outbound traffic terminology:
    • Inbound describes traffic from VCC.
    • Outbound describes traffic to VCC.

We recommend adding the appropriate URLs and IP addresses to any firewall rules that restrict employee access, and we request that you treat Vonage Contact Center as a business-critical application. By this, we mean optimizing and prioritizing IP traffic to Vonage Contact Center over other non-critical traffic. This is to ensure real-time responses to agent requests are processed in a timely and efficient manner (call steering buttons, call transfers, hold requests, and so on).

...

SFTP access to call recordings requires TCP port 2244044.

Inbound

All inbound traffic requires access to destination TCP port 443 (HTTPS) on our servers to establish a connection. Responses are sent to a range of ephemeral ports.

...

You must also add the IP addresses specified in the following sections to your allowlist:

...

Insert excerpt
_ExcerptWebRTCFirewallConfig
_ExcerptWebRTCFirewallConfig
nopaneltrue

...

Webhooks API traffic

Insert excerpt
_ExcerptWalkMeFirewallConfigurationExcerptWebhooksFirewallConfig
_ExcerptWalkMeFirewallConfigurationExcerptWebhooksFirewallConfig
nopaneltrue

...

Using IP allowlisting

...

If your firewall does not support URL/DNS allowlisting, add the following IP addresses for your region to any existing firewall permissions:

--Amazon Web Services (AWS)

Most of VCC uses Amazon Web Services (AWS).

...

VCC regionAWS region IDAWS region name
EMEA

eu-central-1Frankfurt

eu-west-2London
NAM

us-east-1North Virginia

us-west-1North Californiaus-west-2Oregon
APAC

ap-southeast-1Singapore

ap-southeast-2Sydney


--Adobe Analytics

Add the IP addresses specified in the following page to any existing firewall permissions: https://experienceleague.adobe.com/docs/analytics/technotes/ip-addresses.html?lang=en

--Amplitude

Add the IP addresses specified in the following page to any existing firewall permissions:

...

Insert excerpt
_ExcerptWebRTCFirewallConfig
_ExcerptWebRTCFirewallConfig
nopaneltrue

--Webhooks API traffic

Insert excerpt
_ExcerptWebhooksFirewallConfig
_ExcerptWebhooksFirewallConfig
nopaneltrue