Although we do not have every firewall listed, most modern commercial firewalls are capable of handling our UCaaS service.
1. Ensure "SIP ALG" is disabled
2. Make sure the phones are not load balanced if multiple WAN's. Create a rule to make sure the phones only fail over onto different circuits. Our system "locks" onto the registered IP and will deny requests from others preventing the phone to download the directory and other config files from any IP other than the registered one.
We generally create a rule to allow and prioritize all traffic to and from our servers. Most communication occurs over port 5060, but there are some other services that run over other ports.
For APOLLO servers:
1. Allow and prioritize all traffic to and from core2-nj.5060.cloud (64.21.2.1)
2. Allow and prioritize all traffic to and from our geo server: core-fl.5060.cloud (8.12.10.20)
3. Allow all traffic to and from our provisioning server: p1.5060.cloud (64.21.2.4)
4. (optional) enable option 66: http://p1.5060.cloud/cfg