Recommended Firewall rules on SBK Voice clients network side

Applicable for all SBK Voice clients

(1) It is assumed that you have a stateful firewall that will automatically allow the reverse flow. If not, you will need to allow all high ports inbound from our IP addresses, as the destination ports on your end will be random.  

(2) Recommended to make sure that the rules will be applied to any phone (physical or soft) no matter it’s IP on your network.

(3) SIP-TLS is used for SBK Mobile APP.

(4) If your firewall has a reliable SIP-ALG, simply opening the main SIP port might be sufficient and those ports will be dynamically opened. However, if you experience audio issues (one-way audio or no audio at all), we recommend either allowing the indicated port range or deactivate SIP-ALG.

(5) Used for SBK Mobile WEB (Webphone).

(6) Important to implement the CoS on Layer2 and Layer3 

(7) Websocket for portal live updates.

(8) If you do not allow direct internet access to all web addresses, we can supply the specific URLs that must be allowed. Note that the IPs used will be subject to change, so filtering by destination IP is not recommended.

SBK Voice client with CPE: Add following rules

(9) If you prefer to use your NTP server, this can be arranged.