22

TCP/SSH

No

Admin terminal or SAL Gateway

Remote maintenance connection

52

DNS

No

DNS Client

IP Office acts as a DNS relay

67

UDP/DHCP

Yes

DHCP clients such as IP Phones

IP Office DHCP service

67

UDP/BOOTP

Yes

Manager

Manager BOOTP server for IP address and firmware for IP Office

69

UDP/TFTP

No

Legacy Manager, Upgrade Wizard.

IP Office status, program data, UDP Whois. The information that is obtained can be controlled with security settings

80*

(1-100)

TCP/HTTP

Yes

File transfer Manager and phones, Web client, DECT R4 Provisioning, SoftConsole, WebSocket SCN, Voicemail Pro.

General purpose HTTP file and WebSocket server. Phone backup/restore and firmware download.

123

NTP

No

DECT R4, IP Office

NTP (RFC4330) Service - SNTP subset

161*

(161, 1024- 65535)

UDP/SNMP

Yes

SNMP Agent

Read-only access to MIB entries

411

TCP/HTTPS

Yes

H.232 phone

Phone settings files

443*

(1-65535)

TCP/HTTPS

Yes

Manager and phones, Web client, DECT R4 Provisioning, SoftConsole, WebSocket SCN, Voicemail Pro. SIP, H.323 phones

General purpose HTTPS file and WebSocket server. Secure phone backup/restore

520

UDP/RIP

Yes

Router

Exchange routing information with adjacent IP routers or receive information

546

UDP/DHCPv6

Yes

DHCPv6 clients

IP Office DHCPv6 service.

1300

TLS/H.323 signaling

Yes

H.323 Phone

Secure H.323 signaling from IP phones

1701

UDP/L2TP

Yes

Remote Network devices

From layer 2 tunnels to remote network devices

1718

UDP/H.323

discovery

Yes

H.323 phone

H.323 service to IP Phones

1719

UDP/H.323 status

Yes

H.323 phone

H.323 service to IP Phones

1720

TCP/H.323 signaling

Yes

H.323 phone

H.323 service to IP Phones

4097

TCP

No

N/A

Debug (disabled)

5056*

(1024- 64510)

UDP+TCP/SIP

Yes

SIP endpoint, SIP trunk, SIP Proxy

SIP extensions.

5060*

(1024-64510)

TCP+UDP/SIP

Yes

SIP endpoint, SIP trunk, SIP Proxy

SIP extensions

5061*

(1024-64510)

TLS/SIP

Yes

SIP endpoint, SIP trunk, SIP Proxy

SIP extensions

5443

TCP/HTTPS

Yes

Backup/Restore client, UC client upgrade.

Secure server for solution backup/restore. Secure URI for VM listen for UC client. Upgrade for Hosted Deployment. Applies only to IP Office Linux and Application Server

5480

TCP/HTTPS

Yes

Web interface for Virtual Appliance Management Infrastructure (VAMI)

Virtual Linux-based IP Office severs. No firewall configuration needed

5488

TCP

Yes

CIM client for VAMI

Linux-based IP Office severs. No firewall configuration needed.

5489

Yes

Yes

CIM client for VAMI

Linux-based IP Office severs. No firewall configuration needed.

7070

TCP/HTTPS

Yes

Web Management client

Linux-based IP Office severs.

7071

TCP/HTTPS

Yes

Web Management client

Linux-based IP Office severs.

7147

TCP/HTTPS

No

Collaboration Services/SMA

IP Office Application Server and UCM.

7444

TCP/HTTPS

No

IP Office User Portal

IP Office Application Server and UCM.

8000

TCP/HTTP

No

Web Management client, Upgrade.

Upgrade web service. Log download

8411

TCP/HTTP

Yes

H.323 phone

Phone settings files. Firmware download

8443*

(1-65535)

TCP/HTTPS

Yes

Web Management client

-

9080

TCP/HTTP

No

Web Management client

-

40750-50750

UDP/RTP

UDP/RTCP

Yes

Media end points

IP Office Linux uses the port range 32768- 61000 for RTP connections. IP500 V2 default 40750-50750

40750-50750

UDP/SRTP

UDP/SRTCP

Yes

Media end points

IP Office Linux uses the port range 32768- 61000 for RTP connections. IP500 V2 default 40750-50750

50780

UDP/Proprietary

Yes

Dongle application

Not used

50792

UDP/Voicemail

Yes

Voicemail server

Voicemail Pro media

50793

TCP/Proprietary

Yes

Solo Server

TAPI Wave Driver – audio stream interface for TAPI based applications

50794

UDP+TCP,SysMonitor

Yes

System Monitor, DevLink.

Event, trace and diagnostics outputs

50795

UDP, Voicenet

Yes

SCN Trunks

Small Community Network peer to peer trunk signaling

50796

TCP/TLS

Yes

IPOCC/ACCS

CTI link for Contact Center application

50797

TCP/TAPI

Yes

TAPI clients: CPA, PC Dialer, Web Agent

TAPI

50801

TCP/Proprietary

Yes

Voice Conferencing application

-

50802

TCP/Proprietary

Yes

IP Office Manager, Web Management

Whois #2 and Whois #3, TCP discovery

50804*

(49152-65280)

TCP/Proprietary

Yes

IP Office Manager

IP Office configuration interface

50805*

(49152-65280)

TCP/TLS

Yes

IP Office Manager

IP Office configuration interface secure (encrypted)

50808*

(49152-65280)

TCP/Proprietary

Yes

System Status Application

IP Office status information

50809*

(49152-65280)

TCP/TLS

Yes

System Status Application

IP Office status information secure (encrypted)

50812*

(49152-65280)

TCP/Proprietary

Yes

IP Office Manager

IP Office security settings

50813*

(49152-65280)

TCP/TLS

Yes

IP Office Manager

IP Office security settings secure (encrypted)

50814*

(49152-65280)

TCP/Proprietary

Yes

one-X server

IP Office CTI control for one-X

50823

TCP

No

N/A

Debug IP Office Linux (disabled)

52233

TCP/HTTPS

Yes

WebLM client

WebLM server for licensing

56000-58000

UDP/RTP

No

WebRTC Media gateway

Media endpoints

25

TCP/SMTP

Yes

SMTP email server

Email transmission from IP Office (TLS enforced)

37

UDP/TIME

Yes

Manager and VMPro

TIME (RFC868) Service

53

UDP/DNS

Yes

DNS server

Name Service

68

UDP/DHCP

Yes

DHCP server

IP Office obtaining DHCP address from a server

68

UDP/BOOTP

Yes

Manager

IP Office obtaining IP address and firmware

69

UDP/TFTP

Yes

Manager

IP Office obtaining firmware on behalf of phones

123

UDP/NTP

Yes

NTP server

NTP (RFC 4330) Service - SNTP

162*

UDP/SNMP

Yes

SNMP Receiver

Trap generation from IP Office

389

TCP/LDAP

Yes

LDAP service

Import of directory information from LDAP database

443

TCP/HTTPS

Yes

SCEP server

SCEP to System Manager

443

HTTPS

Yes

Google Cloud Storage

Subscription system backup, restore, and upgrade.

500

UDP/IKE

Yes

Remote device

Form IPSec association with remote security devices

514*

UDP+TCP/Syslog

Yes

Syslog server

-

520

UDP/RIP

Yes

Router

Exchange routing information with adjacent IP routers or receive information

547

UDP/DHCPv6

Yes

DHCPv6 Server

IP Office DHCPv6 IP address request.

3478*

UDP

Yes

STUN Server

-

5060

UDP+TCP/SIP

Yes

c

-

5061

TLS/SIP

Yes

SIP trunk

-

5443

TCP/HTTPS

Yes

HTTPS server

Solution backup/restore using HTTPS

6514

TLS/Syslog

Yes

Syslog server

-

10162

UDP/SNMP

Yes

SNMP trap

SNMP trap to System Manager

40750-50750*

UDP/RTP-RTCP UDP/SRTPSRTCP

Yes

Media end points

IP Office Linux uses the port range of 32768- 61000 for RTP connections with the media server.

IP500 V2 default 46750-50750

50791

UDP/Voicemail

Yes

Voicemail server

Voicemail Pro signaling/media

50795

UDP/Voicenet

Yes

SCN trunks

SCN peer to peer trunk signaling Legacy trunks only, WebSocket SCN uses 80/443

50815

TCP/TLS

No

one-X Portal

IP Office CTI control for one-X Portal

52233

TCP/HTTPS

Yes

WebLM server

Used for WebLM licensing

4096

TCP

Yes

IP Office SNMP Agent

-

4444

TCP/JMX

Yes

WebRTC signaling gateway

Management port used by WebRTC signal gateway to communicate with media gateway

4445

TCP/JMX

Yes

Messaging port used by WebRTC signal gateway to communicate with media gateway

5005*

TCP

Yes

RTCP monitoring

-

5555

TCP

Yes

WebRTC signaling gateway

Messaging port used by WebRTC signal gateway to communicate with media gateway

5556

TCP/JMX

Yes

Messaging port used by WebRTC signal gateway to communicate with media gateway

6006

TCP

Yes

QoS

-

17777

TCP

Yes

IP Office and Jade

Communication between IP Office and JADE

42004*

TCP/SIP

Yes

WebRTC signaling gateway

SIP client connections from IP Office

42008*

TCP/SIP

Yes

SIP trunk connections from IP Office