Open network ports
General firewall and web proxy settings
The following table lists the required firewall and web proxy settings for:Lifesize systems and apps connected to the Lifesize cloud serviceMicrosoft Skype for Business OnlineOn-Premise Microsoft Lync 2013 and Skype for BusinessThird-party guest systems using SIPThird-party guest systems using H.323
Please configure your firewall to allow outbound access from your network to the following destinations and ports.
NOTE: The following ports assume a stateful firewall with symmetric UDP enabled.
| Source IP | Source Ports | Destination IP | Destination Ports | Description |
|---|---|---|---|---|
| Any | TCP: any | *.lifesize.com *.lifesizecloud.com jwpsrv.com ssl.p.jwpcdn.com jwpltx.com twilio.com cloudfront.net pmi.flowplayer.com | TCP:80, 443 | Lifesize web services and other web services used by Lifesize endpoints |
| Any | TCP: anyUDP: any | fwa.lifesizecloud.com | TCP: 443, 3478UDP: 443, 3478, 30000-32000, 49000-65535 | TURN service – point to point support for endpoints on different networks |
| Any | TCP: anyUDP: any | fwb.lifesizecloud.com | TCP: 5060, 5061UDP: 5060 | SIP service |
| Any | UDP: any | fwc.lifesizecloud.com | UDP: 60000-65000 | Media service |
| Any | TCP: anyUDP: any | fwd.lifesizecloud.com | TCP: 40000-50000UDP: 40000-60000 | WebRTC relay service |
| Any | UDP: any | fwe.lifesizecloud.com | UDP: 10000-30000 | Media relay service |
| Any | TCP: any | fwf.lifesizecloud.com | TCP: 443, 5222 | Presence and chat service |
| Any client | TCP:anyUDP: any | fwg.lifesizecloud.com | TCP: 30000-50000UDP: 30000-50000 | Microsoft Lync 2013 and Skype for Business gateway service |
| Edge server | TCP: 5061UDP: 50000-59999 | fwg.lifesizecloud.com | TCP: 5061UDP: 30000-50000 | Microsoft Lync 2013 and Skype for Business gateway service |
| Any | TCP: anyUDP: any | fwh.lifesizecloud.com | TCP: 80, 443UDP: 30000-32000 | Tunnel service for web apps and desktop apps |
| Any | TCP: anyUDP: any | fwi.lifesizecloud.com | TCP: 1720, 10000-28000UDP: 10000-28000 | H.323 service |
| Any | TCP: anyUDP: any | fwj.lifesizecloud.com | TCP: 443, 1720, 5060, 5061, 10000-16000, 35061UDP: 5060, 10000-28000 | Existing call management node servers |
Customer specific firewall and web proxy settings
If you have third-party integration for approved Cisco® and Polycom® devices, you will be provided with an H.460 server IP address.
Please configure your firewall to allow outbound access from your network to the following destinations and ports.
NOTE: The following ports assume a stateful firewall with symmetric UDP enabled.
| Source IP | Source Ports | Destination IP | Destination Ports | Description |
|---|---|---|---|---|
| Third-party system | UDP: 1719 | Lifesize H.460 server | UDP: 1719 | H.460/RAS signaling |
| Third-party system | TCP: any | Lifesize H.460 server | TCP:1720 | H.460/H.225.0/Q.931 call setup signaling |
| Third-party system | TCP: any | Lifesize H.460 server | TCP: 20000-20200 | H.460/H.245 call control signaling |
| Third-party system | UDP: any | Lifesize H.460 server | UDP: 6768, 6769 | H.460.19 Multiplexed RTP/RTCP media. SRTP is used if the 3rd party device is configured to use encryption. |
| Third-party system | TCP: any | ldapexport.lifesizecloud.com | TCP: 389 | Authenticated LDAP (non-TLS) directory services |
| Third-party system | TCP: any | ldapexport.lifesizecloud.com | TCP: 636 | Authenticated LDAPS (TLS) directory services |
| Third-party system | TCP: any | soapexport.lifesizecloud.com | TCP: 80 | Authenticated SOAP (HTTP) directory services |
| Third-party system | TCP:any | soapexport.lifesizecloud.com | TCP: 443 | Authenticated SOAP (HTTPS) directory services |