Mitel One Mobile

The following table lists the connections from Mitel One to the external destination unless specified. The rules used for establishing the connections assume the firewall that permits return traffic on these established connections. This is referred to as pin hole punching. If pin hole punching is not available or has been disabled on the firewall, then you must exercise your own due diligence in configuring and testing the connections with the ports listed.

Note:

The port requirements for WebSockets are given here: Device communication protocols - AWS IoT Core.
If you are using a proxy server, ensure that it proxies WebSockets and HTTPS.
For more information about the ports and hosts used for Apple Push Notification service (APNs), see Apple documentation (If your Apple devices aren't getting Apple push notifications).
For more information about configuring your firewall to connect a device with Firebase Cloud Messaging (FCM), see Firebase Cloud Messaging.
For more information about VPN recommendations and network requirements, see Mitel One Mobile Application User Guide.
ICMP must be enabled on the firewall.
Source port numbers are typically managed by the network stack.
For details about the media flow, see CloudLink Platform.
* The RTP/RTCP source port range for the softphone is automatically selected by WebRTC or the OS, respectively. There are no restrictions on the port range.
Examples of the IP address ranges which are expected can be found here.

Purpose	Direction	Protocol	Destination FQDN	Destination IP	Port
Managed Services provided by the CloudLink Platform including APIs, and portals	App to Internet	TCP	*.mitel.io	See the CloudLink Platform IP Address Ranges section in this document.	443
STUN Service	App to Internet	UDP	*.mitel.io	See the CloudLink Platform IP Address Ranges section in this document.	3478 and 3479
DNS Service	GW to Internet	UDP	N/A	Customer’s configured DNS	53
SIP Connectivity	App to Internet	TCP	*.mitel.io	See the CloudLink Platform IP Address Ranges section in this document.	5061
WebRTC Connectivity*	App to Internet	TCP	*.mitel.io	See the CloudLink Platform IP Address Ranges section in this document.	7443
RTP/SRTP Connectivity	App to Internet	UDP	*.mitel.io	See the CloudLink Platform IP Address Ranges section in this document.	16384 to 49152
WebSocket Connectivity	App to Internet	TCP	*.amazonaws.com	See the CloudLink Platform IP Address Ranges section in this document.	See note on WebSocket above
Google Cloud Resources	App to Internet	TCP	.gstatic.com .googleapis.com	Google IP address ranges can be found here: Obtain Google IP address ranges - Google Workspace Admin Help (See "IP ranges that Google makes available to users on the internet" in the given link.)	443
Required for CloudLink Single Sign-On deployment using Azure AD federation	App to Internet	TCP	.microsoftonline.com .microsoft.com	The IP address range published by Microsoft is shown here: Office 365 URLs and IP address ranges - Microsoft 365 Enterprise See "ID 56" in the table of the given link.	443
Bugsnag Troubleshooting service	App to Internet	TCP	See BugSnag firewall rules	See BugSnag firewall rules	443

↑