At Zoom, we are hard at work to provide you with the best 24x7 global support experience. As part of this ongoing commitment, please review our updated Support Guidelines.



Network firewall or proxy server settings for Zoom for Government Follow

Overview

Below you will find the recommend firewall rules, including ports and addresses for the Zoom for Government service.

This article covers:

Firewall rules

To configure your network firewall, please see the following tables. All rules should be applied both inbound and outbound. The below ports assume a stateful firewall with symmetric UDP enabled.

Zoom website firewall rules

Protocol Ports Source Destination
TCP 80, 443 All Zoom Clients *.zoomgov.com

 

General Zoom client firewall rules

Protocol Ports Source Destination
TCP 80, 443 All Zoom clients *.zoomgov.com
TCP 443, 8801, 8802 All Zoom clients

52.61.100.128/25
160.1.56.128/25
161.199.136.0/22
198.251.240.0/20

UDP

3478, 3479
8801 - 8810

All Zoom clients

52.61.100.128/25
160.1.56.128/25
161.199.136.0/22
198.251.240.0/20

TCP

443
3000-4000
5061

SIP Endpoints

52.61.100.128/25
160.1.56.128/25
161.199.136.0/22
198.251.240.0/20
sip.zoomgov.com

UDP

3000-4000
9000-10000

SIP Endpoints

52.61.100.128/25
160.1.56.128/25
161.199.136.0/22
161.199.138.32
161.199.138.24
161.199.136.32
161.199.136.24
198.251.240.0/20
sip.zoomgov.com

TCP

443

Interop Services (Cisco/Polycom API Connector)

52.61.100.128/25
160.1.56.128/25
161.199.136.0/22
161.199.138.32
161.199.138.24
161.199.136.32
161.199.136.24
198.251.240.0/20
sip.zoomgov.com

Note: For the best H.264 SVC experience, we recommend always using UDP ports. 

Zoom Phone firewall rules

Note: Outbound port 390 must be open for company directory search on desk phones.

Protocol Ports Source Destination
TCP 5091 All Zoom clients 161.199.136.0/24
161.199.138.0/24
198.251.240.0/20
UDP 20000-64000 All Zoom clients 161.199.136.0/24
161.199.138.0/24
198.251.240.0/20
TCP 390 All IP Phones 160.1.56.130
160.1.56.131
TCP 5061 SBCs (For On-Premise Peer Signaling) 160.199.136.45 160.199.138.45

 

Network firewall or web security gateway

If your app stays in a "connecting" mode or has timed out due to "Network error, please try again" or "Can't connect to our service, please check your network connection and try again" issues, it could be related to your network connection, network firewall settings, or web security gateway settings.

Note: Check your network connection by opening a browser and ensure that you can access https://zoomgov.com

Proxy server usage

Zoom supports https/SSL proxy server via port 443. Zoom will automatically detect your proxy settings. However, in some instances, you may be prompted to enter the proxy username/password.

Note: We recommend allowing zoomgov.com and *.zoomgov.com from proxy/SSL inspection.