Webex with Daisy Hosted Voice utilises separate Session Border Controls (SBCs) and API gateways.
💡On Gamma’s side, Daisy Hosted Voice (DHV) is referred to as Horizon; which is why the word Horizon is utilised within domain names.
Gamma Services
The Webex client apps require access to Cisco Webex services, as detailed below:
IP Address Range | Protocols and Ports | Function |
151.2.128.0/19 | TCP 443 | HTTPS APIs |
151.2.128.0/19 138.248.17.0/24 138.248.19.128/25 | TCP 5082, UDP 10000 – 60000 | SIPS signalling, SRTP media |
If DNS based filtering is used, then access to the below domains should be allowed:
Domain | Function |
*. pub.uhorizon.cloud | Gamma Cloud Services |
SBC Discovery
DNS SRV records are used to provide high-availability service for Webex client applications. DNS SRV records resolve to two or more DNS A-records, which in turn resolve to IP addresses of Horizon Access SBCs.
💡In the domain names below each X refers to any digit.
Domain Name | Record Type | Service Name | Protocol | Port |
wasXXhjXX.pub.uhorizon.cloud Example: _sips._tcp.was03hj01.pub.uhorizon.cloud | SRV | SIPs | UDP | 5082 |
wasXXjhXX.pub.uhorizon.cloud Example: _sips._tcp.was03jh01.pub.uhorizon.cloud | SRV | SIPs | UDP | 5082 |
wasXXptXX.pub.uhorizon.cloud Example: _sips._tcp.was04pt01.pub.uhorizon.cloud | SRV | SIPs | UDP | 5082 |
wasXXtpXX.pub.uhorizon.cloud Example: _sips._tcp.was04tp01.pub.uhorizon.cloud | SRV | SIPs | UDP | 5082 |
Webex Services
Destination | Protocols & Ports | Function |
See Webex Service Domains below | TCP 443 | HTTPS signalling and APIs |
See Webex Media Services below | UDP 5004 & 9000 | SRTP media |
Any | UDP 123 | NTP, not required if NTP available within customer network |
Any | UDP 53 TCP 53 | DNS, not required if DNS available within customer network |
Webex Service Domains
Domain/URL | Function |
*.webex.com *.cisco.com *.wbx2.com *.ciscospark.com *.webexapis.com | Webex micro-services |
*.webexcontent.com | Webex user content storage |
*.accompany.com | People Insights Integration |
*.sparkpostmail1.com *.sparkpostmail.com | E-mail service |
*.giphy.com | GIF image sharing |
safebrowsing.googleapis.com | URL safety checking |
msftncsi.com/ncsi.txt captive.apple.com/hotspot-detect.html | Internet connectivity checking |
*.appdynamics.com *.eum-appdynamics.com | Performance tracking |
*.amplitude.com | Testing metrics |
*.slido.com *.sli.do *.data.logentries.com slido-assets-production.s3.eu-west-1.amazonaws.com | Slido add-in |
*.quovadisglobal.com *.digicert.com *.godaddy.com *.identrust.com *.lencr.org *.intel.com | Certificate revocation lists |
*.google.com *.googleapis.com | Notifications to mobile apps |
cdnjs.cloudflare.com cdn.jsdelivr.net static2.sharepointonline.com appsforoffice.microsoft.com | Webex Scheduler for Microsoft Outlook |
Webex Media Services
IP Address Range | Function |
66.114.160.0/20 66.163.32.0/19 69.26.160.0/19 114.29.192.0/19 144.196.0.0/16 150.253.128.0/17 163.129.0.0/16 170.72.0.0/16 170.133.128.0/18 173.39.224.0/19 23.89.0.0/16 173.243.0.0/20 207.182.160.0/19 44.234.52.192/26 209.197.192.0/19 210.4.192.0/20 62.109.192.0/18 216.151.128.0/19 64.68.96.0/19 | Webex meetings media |