Expert Advice & Sales: (415)-659-8178

Firewall Ports for Video Conferencing Equipment

Using Video Conferencing Systems with Firewalls

Firewalls
A firewall protects an organization’s network by controlling data traffic from outside the network.

Unless the firewall is designed to work with H.323 videoconferencing equipment, it will prevent successful videoconferencing because it does not allow unsolicited data to enter the network.   You can manually configure your system with the relevant port openings.

Configuring for Use with Firewalls

The following ports must be opened in the firewall and assigned to the videoconferencing endpoint(s):

  • Port 389 (TCP): For ILS registration
  • Port 1503 (TCP): Microsoft NetMeeting T.120 data sharing
  • Port 1718 (UDP): Gatekeeper discovery
  • Port 1719 (UDP): Gatekeeper RAS (Must be bi-directional)
  • Port 1720 (TCP) H.323 Call setup (Must be bi-directional)
  • Port 1731 (TCP): Audio call control (Must be bi-directional)
  • Ports 3230-3235 (TCP/UDP): Signaling and control for audio, call, video and data/FECC
  • Port 3603 (TCP): ViaVideo Web interface (ViaVideo users only)

If the firewall does not support H.323 then Fixed ports need to be set on the codec.

For Group RealPresence Systems:

the following for point to point call plus People & Content
Gatekeeper Discovery (RAS) 1718-1719 UDP
Q.931 Call Setup 1720 TCP
Audio Call Control 1731 TCP
Video Range 3230-3253 TCP/UDP
Audio Range 3230-3253 TCP/UDP
Data/FECC Range 3230-3253 TCP/UDP

multipoint call+ People&Content

Gatekeeper Discovery (RAS) 1718-1719 UDP
Q.931 Call Setup 1720 TCP
Audio Call Control 1731 TCP
Video Range 3230-3253 TCP/UDP
Audio Range 3230-3253 TCP/UDP
Data/FECC Range 3230-3253 TCP/UDP

For the Polycom HDX Systems:

TCP 1720
TCP3230-3243
UDP 3230-3285

For Cisco C Series and MXP Series H.323:

Gatekeeper Discovery (RAS) – Port 1719 – UDP
Q.931 call Setup – Port 1720 – TCP
H.245 – Port Range 5555-5574 – TCP
Video – Port Range 2326-2485 – UDP
Audio – Port Range 2326-2485 – UDP
Data/FECC – Port Range – 2326-2485 – UDP

For Cisco C Series and MXP Series SIP:

SIP messages – Port 5060 – UDP/TCP
SIP messages – Port 5061 – TLS(TCP)
Video – Port Range 2326-2485 – UDP
Audio – Port Range 2326-2485 – UDP