CloudLink Chat Integration

This section provides details on firewall requirements for Mitel products that integrate CloudLink Chat into their solution.  The details include conversations, notifications, presence, and SSO.

The following table lists the connections from the Mitel product to the external destination unless specified. The rules used for establishing the connections assume a firewall that permits return traffic on these established connections. This is referred to as pin hole punching. If pin hole punching is not available or has been disabled on the firewall, then you must exercise your own due diligence in configuring and testing the connections with the ports listed.
Note:
Purpose Direction Protocol Destination FQDN Destination IP Destination Port

Managed Services provided by the CloudLink Platform including APIs, and portals

Server to Internet

TCP

*.mitel.io

See the CloudLink Platform IP Address Ranges section in this document.

443

DNS Service

GW to Internet

UDP

N/A

Customer’s configured DNS

53

WebSocket Connectivity

Server to Internet

TCP

*.amazonaws.com

See the CloudLink Platform IP Address Ranges section in this document.

See note on WebSocket above

Required for CloudLink Single Sign-On deployment using Azure AD federation

Server to Internet

TCP

*.microsoftonline.com

*.microsoft.com

The IP address range published by Microsoft is shown here: Office 365 URLs and IP address ranges - Microsoft 365 Enterprise 

See "ID 56" in the table of the given link.

443