https://help.webex.com/en-us/article/WBX000028782/Network-Requirements-for-Webex-Services#id_134731
OUTGOING:
Port:
53/TCP+UDP
9000/UDP
5004/TCP
443/TCP
80/TCP
123/UDP
IP subnets for media services
114.29.192.0/19
144.196.0.0/16
150.253.128.0/17
170.133.128.0/18
170.72.0.0/16
173.243.0.0/20
173.39.224.0/19
20.108.99.0/24
20.120.238.0/23
20.50.235.0/24
20.53.87.0/24
20.57.87.0/24
20.68.154.0/24
20.76.127.0/24
207.182.160.0/19
209.197.192.0/19
210.4.192.0/20
216.151.128.0/19
23.89.0.0/16
40.119.234.0/24
44.234.52.192/26
52.232.210.0/24
62.109.192.0/18
64.68.96.0/19
66.114.160.0/20
66.163.32.0/19
69.26.160.0/19
| IP/Network address | Description | IP address | Port TCP/UDP | Description | Permit/Deny |
| All endpoints IP | Cisco Video Device | Internet* | 443 TLS/TCP | HTTPS Signaling + fallback calling | Permit |
| All endpoints IP | Cisco Video Device | Internet* | 123 UDP | NTP | Permit |
| All endpoints IP | Cisco Video Device | Internet* | 53 UDP + TCP | DNS | Permit |
| All endpoints IP | Cisco Video Device | See chart below** | 5004 UDP + TCP | Encrypted Video communication | Permit |
| All endpoints IP | Cisco Video Device | See chart below** | 9000 UDP | Encrypted Video communication | Permit |
| ** | |||||
| Destination IP’s for Webex Media Services** | |||||
| 20.50.235.0/24* | 66.114.160.0/20 | ||||
| 20.53.87.0/24* | 66.163.32.0/19 | ||||
| 20.57.87.0/24* | 69.26.160.0/19 | ||||
| 20.68.154.0/24* | 114.29.192.0/19 | ||||
| 20.76.127.0/24* | 150.253.128.0/17 | ||||
| 20.108.99.0/24* | 170.72.0.0/16 | ||||
| 20.120.238.0/23* | 170.133.128.0/18 | ||||
| 23.89.0.0/16 | 173.39.224.0/19 | ||||
| 40.119.234.0/24* | 173.243.0.0/20 | ||||
| 44.234.52.192/26 | 207.182.160.0/19 | ||||
| 52.232.210.0/24* | 209.197.192.0/19 | ||||
| 62.109.192.0/18 | 210.4.192.0/20 | ||||
| 64.68.96.0/19 | 216.151.128.0/19 | ||||
| * | |||||
| Cisco Webex Services URLs* | |||||
| Domain / URL | Description | Webex Apps and devices using these domains / URLs | |||
| *.wbx2.com | Webex micro-services. | All | |||
| *.ciscospark.com | For example : | ||||
| *.webexapis.com | Messaging service | ||||
| File management service | |||||
| Key management service | |||||
| Software upgrade service | |||||
| Profile picture service | |||||
| Whiteboarding service | |||||
| Proximity service | |||||
| Presence service | |||||
| Registration service | |||||
| Calendaring service | |||||
| Search service | |||||
| *.webex.com | Webex Meetings services | All | |||
| *.cisco.com | Identity provisioning | ||||
| Identity storage | |||||
| Authentication | |||||
| OAuth services | |||||
| Device onboarding | |||||
| Cloud Connected UC | |||||
| *.webexcontent.com (1) | Webex messaging service – general file storage including: | All | |||
| User files, | Note: | ||||
| Transcoded files, | File storage using webexcontent.com replaced clouddrive.com in October 2019 | ||||
| Images, | |||||
| Screenshots, | Your organization may still be using cloudrive.com to store older files – for more information see (1) | ||||
| Whiteboard content, | |||||
| Client & device logs, | |||||
| Profile pictures, | |||||
| Branding logos, | |||||
| Log files | |||||
| Bulk CSV export files & import files (Control Hub) | |||||
| Additional Webex related services – Cisco Owned domains | |||||
| URL | Description | Webex Apps and devices using these domains / URLs | |||
| *.accompany.com | People Insights Integration | Webex Apps | |||
| Additional Webex related services – Third Party domains | |||||
| URL | Description | Webex Apps and devices using these domains / URLs | |||
| *.sparkpostmail1.com | e-mail service for newsletters, registration info, announcements | All | |||
| *.sparkpostmail.com | |||||
| *.giphy.com | Allows users to share GIF images. This feature is on by default but can be disabled in Control Hub | Webex App | |||
| safebrowsing.googleapis.com | Used to perform safety-checks on URLs before unfurling them in the message stream. This feature is on by default, but can be disabled in Control Hub | Webex App | |||
| *.walkme.com | Webex User Guidance client. Provides onboarding and usage tours for new users | Webex web based apps | |||
| s3.walkmeusercontent.com | For more info see https://support.walkme.com/knowledge-base/access-requirements-for-walkme/ | ||||
| speech.googleapis.com | Google Speech Services. Used by Webex Assistant to handle speech recognition and text-to-speech. Disabled by default, is opt-in via Control Hub. Assistant can also be disabled on a per-device basis. | Webex Room Kit and Webex Room devices | |||
| texttospeech.googleapis.com | |||||
| Details of Webex Room devices that support Webex Assistant are documented here: | |||||
| speech-services-manager-a.wbx2.com | https://help.webex.com/hzd1aj/Enable-Cisco-Webex-Assistant | ||||
| msftncsi.com/ncsi.txt | Third-party internet connectivity check to identify cases where there is a network connection, but no connection to the Internet. | Webex App | |||
| captive.apple.com/hotspot-detect.html | The Webex app performs its own internet connectivity checks, but can also use these 3rd party URLs as a fallback. | ||||
| *.appdynamics.com | Performance tracking, error and crash capture, session metrics (3) | Webex App | |||
| *.eum-appdynamics.com | Webex Web App | ||||
| *.amplitude.com | A/B testing & metrics (3) | Webex Web App | |||
| Webex Android App | |||||
| *.vbrickrev.com | This domain is used by attendees viewing Webex Events Webcasts | Webex Events | |||
| *.slido.com | Used for Slido PPT add-in and to allow Slido webpages to create polls/quizzes in pre-meeting | All | |||
| *.sli.do | |||||
| *.data.logentries.com | Used for exporting questions and answers, poll results, etc, from Slido | ||||
| slido-assets-production.s3.eu-west-1.amazonaws.com | |||||
| *.quovadisglobal.com | Used to request Certificate Revocation Lists from these Certificate Authorities | All | |||
| *.digicert.com | |||||
| *.godaddy.com | Note – Webex supports both CRL and OCSP stapling to determine the revocation status of certificates. | ||||
| *.identrust.com | |||||
| *.lencr.org | With OCSP stapling, Webex apps and devices do not need to contact these Certificate Authorities | ||||
| *.intel.com | Used to request Certificate Revocation Lists and check the certificate status with Intel’s OCSP service, for certificates sent with background images used by Webex apps and devices | All | |||
| *.google.com | Notifications to Webex apps on mobile devices (e.g. new message) | Webex App | |||
| *.googleapis.com | |||||
| Google Firebase Cloud Messaging (FCM) service | |||||
| https://firebase.google.com/docs/cloud-messaging/concept-options#messaging-ports-and-your-firewall | |||||
| Apple Push Notification Service (APNS) | |||||
| https://support.apple.com/en-us/HT203609 | |||||
| Note – For APNS, Apple only list the IP subnets for this service | |||||
| cdnjs.cloudflare.com cdn.jsdelivr.net static2.sharepointonline.com appsforoffice.microsoft.com | URLs for Webex Scheduler for Microsoft Outlook | All | |||
| Microsoft Outlook users can use the Webex Scheduler to schedule Webex meetings or Webex Personal Room meetings directly from Microsoft Outlook, in any browser | |||||
| For details see: Click here | |||||
| Core Webex services being deprecated (2) | |||||
| URL | Description | Webex Apps and devices using these domains / URLs | |||
| *.clouddrive.com | Webex messaging file storage | All | |||
| File storage using webexcontent.com replaced clouddrive.com in Oct 2019 | |||||
| Your organization may still be using cloudrive.com to store older files – for more information see (1) | |||||
| *.ciscosparkcontent.com | Log file uploads | Webex App | |||
| The log file storage service now uses the *.webexcontent.com domain | |||||
| *.rackcdn.com | Content Delivery Network (CDN) for the *.clouddrive.com domain | All | |||
