Overview
Below you will find the recommend firewall rules, including ports and addresses for the Zoom for Government service.
This article covers:
Firewall rules
To configure your network firewall, please see the following tables. All rules should be applied both inbound and outbound. The below ports assume a stateful firewall with symmetric UDP enabled.
Zoom website firewall rules
Protocol | Ports | Source | Destination |
TCP | 80, 443 | All Zoom Clients | *.zoomgov.com |
General Zoom client firewall rules
Protocol | Ports | Source | Destination |
TCP | 80, 443 | All Zoom clients | *.zoomgov.com |
TCP | 443, 8801, 8802 | All Zoom clients |
52.61.100.128/25 |
UDP |
3478, 3479 |
All Zoom clients |
52.61.100.128/25 |
TCP |
443 |
SIP Endpoints |
52.61.100.128/25 |
UDP |
3000-4000 |
SIP Endpoints |
52.61.100.128/25 |
TCP |
443 |
Interop Services (Cisco/Polycom API Connector) |
52.61.100.128/25 |
Note: For the best H.264 SVC experience, we recommend always using UDP ports.
Zoom Phone firewall rules
Note: Outbound port 390 must be open for company directory search on desk phones.
Protocol | Ports | Source | Destination |
TCP | 5091 | All Zoom clients | 161.199.136.0/24 161.199.138.0/24 198.251.240.0/20 |
UDP | 20000-64000 | All Zoom clients | 161.199.136.0/24 161.199.138.0/24 198.251.240.0/20 |
TCP | 390 | All IP Phones | 160.1.56.130 160.1.56.131 |
TCP | 5061 | SBCs (For On-Premise Peer Signaling) | 160.199.136.45 160.199.138.45 |
Network firewall or web security gateway
If your app stays in a 'connecting' mode or has timed out due to 'Network error, please try again' or 'Can't connect to our service, please check your network connection and try again' issues, it could be related to your network connection, network firewall settings, or web security gateway settings.
Note: Check your network connection by opening a browser and ensure that you can access https://zoomgov.com
Proxy server usage
Zoom supports https/SSL proxy server via port 443. Zoom will automatically detect your proxy settings. However, in some instances, you may be prompted to enter the proxy username/password.
Note: We recommend allowing zoomgov.com and *.zoomgov.com from proxy/SSL inspection.