Table 2.1 - Advertised IP Supernets |
66.81.240.0/20 80.81.128.0/20 103.44.68.0/22 104.245.56.0/21 185.23.248.0/22 192.209.24.0/21 199.68.212.0/22 199.255.120.0/22 208.87.40.0/22 |
Table 3.1 - Common Cloud Services | |||
---|---|---|---|
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Company Website |
HTTPS |
www.ringcentral.com |
TCP\443 |
Service Status Portal |
HTTPS |
status.ringcentral.com |
TCP\443 |
Accounts Management Portal |
HTTPS |
accounts.ringcentral.com |
TCP\443 |
Administrator/User Account Portal |
HTTPS |
login.ringcentral.com |
TCP\443 |
API Discovery Service |
HTTPS |
discovery.ringcentral.biz |
TCP\443 |
Service Web Portal |
HTTPS |
service.ringcentral.com |
TCP\443 |
Analytics Portal |
HTTPS |
analytics.ringcentral.com 35.190.70.192 |
TCP\443 |
Analytics Portal - Canada |
HTTPS |
analytics.ringcentral.ca 34.102.174.25 |
TCP\443 |
Live Reports Portal |
HTTPS |
live.ringcentral.com 35.190.70.192 |
TCP\443 |
Live Reports Portal - Canada |
HTTPS |
live.ringcentral.ca 35.201.103.66 |
TCP\443 |
Table 3.2.1 - RingCentral MVP Mobile, Desktop, and Web Application |
|||
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Media/Media Secured and media access control |
RTP/SRTP (DTLS) |
IP Supernets or *.ringcentral.com |
UDP\20000-64999 and UDP\19302 |
Signaling Mobile App |
SIP/TCP |
IP Supernets |
IPv4\IPv6: TCP\5091 |
Signaling Secured Mobile App |
SIP/TLS |
IP Supernets |
IPv4\IPv6: TCP\5097 |
Signaling Secured Mobile App |
SIP/WSS/TLS |
IP Supernets |
IPv4\IPv6: TCP\443 |
Signaling Secured Desktop and Web App |
SIP/WSS |
IP Supernets |
IPv4\IPv6: TCP\8083 |
IOVATION SDK for 2-Factor Login |
HTTPS |
mpsnare.iesnare.com |
TCP\443 |
Application File Upload and Download |
HTTPS |
glip-vault-1.s3.amazonaws.com glip-vault-1.s3-accelerate.amazonaws.com |
TCP\443 |
Log File Upload |
HTTPS |
www.filestackapi.com |
TCP\443 |
Application API Service |
HTTPS |
*.ringcentral.com |
TCP\443 |
Messaging API Service |
HTTPS |
*.glip.com mvp.ringcentral.com dl.mvp.ringcentral.com |
TCP\443 |
Presence Status, Call Log Notifications, and Voicemail Notifications |
HTTPS |
ringcentral.pubnubapi.com |
TCP\443 |
Android Application Push Notifications |
HTTPS |
mtalk.google.com |
TCP\443, 5228, 5229, 5230 |
iOS Application Push Notifications |
HTTPS |
api.push.apple.com |
TCP\443, 2197, 5223 |
Messaging Content Support |
HTTPS |
api.giphy.com media0.giphy.com media1.giphy.com media2.giphy.com media3.giphy.com media4.giphy.com |
TCP\443 |
Software and Provisioning Updates |
HTTPS |
*.cloudfront.net |
TCP\443 |
RingCentral Video Mobile, Desktop, and Web Application |
Add Table 3.2.2 |
Table 3.2.2 - RingCentral Video Mobile, Desktop, and Web Application | |||
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Media Secured |
SRTP |
*.v.ringcentral.com or IP Supernets |
UDP\10000-19999 (default) |
TCP\443 (when UDP is not available - should not be used routinely as it adversely impacts quality) |
|||
Signaling Secured |
HTTPS/WSS/TLS |
*.ringcentral.com |
TCP\443 |
RCV Web Client Application |
HTTPS |
v.ringcentral.com |
TCP\443 |
Parser Configuration for Meeting Link Verification for the Mobile phones |
HTTPS |
media.ringcentral.com |
TCP\443 |
Connect Platform API |
HTTPS |
api-meet.ringcentral.com api.ringcentral.com api-mucc.ringcentral.com (mobile device) |
TCP\443 |
Statistics Collector |
HTTPS |
edr.ringcentral.com |
TCP\443 |
Presence Status, Call Log Notifications, and Voicemail Notifications |
HTTPS |
ringcentral.pubnubapi.com |
TCP\443 |
Application Configuration |
HTTPS |
downloads.ringcentral.com |
TCP\443 |
Application Download and Update |
HTTPS |
app.ringcentral.com |
TCP\443 |
Feature Enablement Control | HTTPS
|
*.launchdarkly.com
which uses - additions may be in the future: app.launchdarkly.com
events.launchdarkly.com
clientstream.launchdarkly.com
mobile.launchdarkly.com
|
TCP\443
|
Network Connectivity Test Application - Part of RCV |
HTTPS |
rcv.testrtc.com api.nettest.testrtc.com kong.testrtc.com *.turn.testrtc.com *.speed.testrtc.com |
TCP\443 UDP\443 |
Table 3.2.3 - RingCentral Webinar Host Client and Attendee Client |
|||
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
RingCentral Video |
|||
Fetch Webinar Session Live Streaming media segments |
HTTPS |
*.cloudfront.net |
TCP\443 |
Table 3.2.4 - RingCentral Video Rooms |
|||
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Media Secured |
SRTP |
IP Supernets |
UDP\10000-19999 (default) |
SRTP |
IP Supernets |
TCP\443 (if UDP is not available - should not be used routinely as it adversely impacts quality) |
|
Signaling Secured |
HTTPS |
IP Supernets |
TCP\443 |
SIP Registration Service |
HTTPS/TLS |
*.ringcentral.com |
TCP\8085-8090 |
Rooms Host Device |
HTTPS |
Internal enterprise assigned private IP address (no WAN firewall traversal) |
TCP\9520-9530 |
Login Portal |
HTTPS |
v.ringcentral.com |
TCP\443 |
Notifications |
HTTPS |
ringcentral.pubnubapi.com |
TCP\443 |
Software and Provisioning Updates |
HTTPS |
*.ringcentral.com |
TCP\443 |
Table 3.2.5 - RingCentral Video with Room Connector |
|||
Purpose* |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Media |
RTP/SRTP |
IP Supernets |
UDP\10000-19999 |
Signaling |
SIP |
Region-independent: sip.rcv.com US West: ws.rcv.com US East: es.rcv.com Netherlands: nld.rcv.com Germany: deu.rcv.com South Africa: zaf.rcv.com Singapore: sgp.rcv.com Australia: aus.rcv.com Japan: jpn.rcv.com |
UDP\5060 or TCP\5060 |
Signaling Secured |
SIP/TLS |
Region-independent: sip.rcv.com US West: ws.rcv.com US East: es.rcv.com Netherlands: nld.rcv.com Germany: deu.rcv.com South Africa: zaf.rcv.com Singapore: sgp.rcv.com Australia: aus.rcv.com Japan: jpn.rcv.com |
TCP\5061 |
Table 3.2.6 - RingCentral Desk, Conference and Cordless Phone | |||
---|---|---|---|
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Media and Media Secured |
RTP/SRTP |
IP Supernets |
UDP\20000-64999 |
Signaling |
SIP |
IP Supernets |
TCP\5090, TCP\5099** UDP\5090, UDP\5099** |
Signaling Secured |
SIP/TLS |
IP Supernets |
TCP\5096, TCP\5098** |
Network Time Service |
NTP |
ntp1.ringcentral.com and ntp2.ringcentral.com |
UDP\123 |
LDAP Directory Service |
LDAP |
cd.ringcentral.com |
TCP\636 |
Polycom/Poly Desk Phones and Conference Phones |
HTTPS |
Provisioning: pp.ringcentral.com ztp.polycom.com |
TCP\443 |
HTTPS |
Firmware Update: pp.s3.ringcentral.com |
TCP\443 |
|
Cisco Desk Phones Provisioning and Firmware Update |
HTTPS |
cp.ringcentral.com |
TCP\443 |
Yealink Desk Phones |
HTTPS |
yp.ringcentral.com rps.yealink.com |
TCP\443 |
Unify Desk Phones |
HTTPS |
unf.ringcentral.com |
TCP\443 |
Unify RS Provisioning Server |
HTTPS |
cloud-setup.com |
TCP\18443 |
Table 3.2.7 - RingCentral Desktop Softphone Application |
|||
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Media and Media Secured |
RTP/SRTP |
IP Supernets |
UDP\20000-64999 |
Signaling |
SIP |
IP Supernets |
TCP\5091 |
Signaling Secured |
SIP/TLS |
IP Supernets |
TCP\5097 |
Presence Status, Call Log Notifications, and Voicemail Notifications |
HTTPS |
*.pubnub.com *.pubnub.net *.pndsn.com
V21.1 or higher: ringcentral.pubnubapi.com |
TCP\443 |
Software and Provisioning Updates |
HTTP/HTTPS |
*.ringcentral.com |
TCP\80 TCP\443 |
Platform API for user Authentication and Call Features |
HTTPS |
api-sp.ringcentral.com |
TCP\443 |
Platform API for Media Service (for transferring media files: voice recordings, faxes, transcriptions, profile and contact information) |
HTTPS |
media.ringcentral.com |
TCP\443 |
Google Services (Contacts and Calendar) |
HTTPS |
accounts.google.com www.google.com www.googleapis.com |
TCP\443 |
Table 3.2.8 - RingCentral Mobile Softphone Application |
|||
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Media |
RTP/SRTP |
IP Supernets |
UDP\20000-64999 |
Signaling |
SIP |
IP Supernets |
TCP\5091 UDP\5091 |
Signaling Secured |
SIP/TLS |
IP Supernets |
TCP\5097 |
Signaling (IPv6 client) |
SIP/TLS |
IP Supernets |
TCP\5090-5098 |
SIP Registration Service |
HTTPS |
*.ringcentral.com |
TCP\443 |
Application Presence Status, Call Log Notifications, and Voicemail Notifications - Used in Android, not in iOS |
HTTPS |
*.pubnub.com *.pubnub.net *.pndsn.com
V19.4.20 or higher: ringcentral.pubnubapi.com |
TCP\443 |
Data Sync with RingCentral backend (e.g., call log info, presence, and voicemails) |
HTTPS |
api-mob.ringcentral.com |
TCP\443 |
Soft Clients Software and Provisioning Updates |
HTTPS |
*.cloudfront.net |
TCP\443 |
Table 3.3.1 - RingCentral Archiver |
|||
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Content Archiving |
HTTPS |
For Box, Dropbox, Google Drive, and Smarsh archiving systems |
TCP\443 |
SFTP |
For archiving to an enterprise SFTP server, the following SFTP client IP addresses must be whitelisted: 3.211.163.136 3.223.170.110 34.225.218.68 34.226.29.169 34.234.210.244 34.236.210.8 34.239.13.99 35.172.123.110 52.87.7.127 54.80.51.95 Any of these IP addresses may dynamically be selected by the RingCentral SFTP client to connect to an enterprise SFTP server. |
TCP\22 |
Table 3.4.1 - SIP Trunks | |||
---|---|---|---|
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Media |
RTP |
Public IP addresses to be provided by RingCentral during project definition |
UDP\1024-65535 |
Signaling |
SIP |
UDP\5060 TCP\5061-5065 |
Table 3.5.1 - Communication Integration Services | |||
---|---|---|---|
Purpose |
Application Protocol |
Domain Name/IP Addresses |
Destination Ports |
Integration API Service |
HTTPS |
api-rcapps.ringcentral.biz api-rcapps.ringcentral.com |
TCP\443 |
Endpoint Registration Service |
HTTPS |
sip*.ringcentral.com |
TCP\8083 |
RCV Scheduling Service |
HTTPS |
api-meet.ringcentral.com |
TCP\443 |
Microsoft Teams Integration Service |
HTTPS |
teams.ringcentral.com |
TCP\443 |
Slack Integration Service |
HTTPS |
slack.ringcentral.com |
TCP\443 |
Platform API to Develop |
HTTPS |
platform.ringcentral.com |
TCP\443 |
Platform API to Develop Embedded Applications |
HTTPS |
platform.ringcentral.com |
TCP\443 |
Table 8.1 Functions that may impair SIP signaling and/or RTP media traffic | |
---|---|
Layer |
Function |
Application |
• SIP Application Layer Gateway (SIP ALG), also referred to as SIP Transformations • SIP inspection • Deep Packet Inspection (DPI) • Application Layer Access Control • Stateful Packet Inspection (SPI), also called Dynamic Packet Filtering • Intrusion Detection/Intrusion Prevention System (IDS/IPS) • Web Proxy operation • WAN Acceleration |
Transport |
• Port filtering |
IP |
• Packet-by-packet load balancing across multiple Service Providers links |
IP & Data Link |
• Auto-QoS, when used in combination with Polycom/Poly phones • Dynamic ARP Inspection |
Physical |
• Energy Efficient Ethernet (a.k.a. Green Ethernet) • Satellite (Ethernet over microwave) network connections |