Port being dropped on our firewall to RingCentral networks not on the firewall ports list

  • 0
  • 1
  • Question
  • Updated 3 years ago
Archived and Closed

This conversation is no longer open for comments or replies and is no longer visible to community members. The community moderator provided the following reason for archiving: We have archived this topic as it has either reached a resolution has become inactive, or information contained in this thread is no longer accurate. If you have a related question on this subject, please post a new topic.

http://success.ringcentral.com/articles/RC_Knowledge_Article/Ports-and-Firewalls

The above doc gives us a list of ports we need to open in the firewall. Looking at our logs however, I see all of our employee systems trying to connect to RingCentral networks on port UDP/3478 pretty consistently and it is being dropped. What is this port and is it something that should be allowed and added to this document?
Photo of Robert Jerina

Robert Jerina

  • 2,470 Points 2k badge 2x thumb

Posted 3 years ago

  • 0
  • 1
Photo of RC-Installer

RC-Installer, Champion

  • 27,832 Points 20k badge 2x thumb
Hi Robert

Simple Traversal of UDP Through NAT (STUN) port. It operates on port 3478 tcp/udp. It is usually supported by newer VoIP devices. [RFC5389] [RFC5766] [RFC5780]
Apple FaceTime, Apple Game Center use ports 3478-3497 (UDP).

Thanks

Chuck
Photo of Robert Jerina

Robert Jerina

  • 2,470 Points 2k badge 2x thumb
Thanks, Chuck. Why is RingCentral Desktop connecting to RingCentral networks on this port though but it does not appear in the list of ports needed opened in a firewall for RingCentral? Is it simply not needed?
Photo of Mike

Mike, Official Rep

  • 94,790 Points 50k badge 2x thumb
Just letting both of you know I'm checking with one of our engineers on this.  

Mike 
Photo of John Tran

John Tran, QoS Network Analyst

  • 350 Points 250 badge 2x thumb
Hi Robert.  Would you happen to have the full capture involving this UDP port 3478?  Basically I'd like to see the source or destination IP address associated with it in your capture.  Thank you.
Photo of Robert Jerina

Robert Jerina

  • 2,470 Points 2k badge 2x thumb
If you just want to see the source and destination:

08:50:50.288364     bond0.65[in ]: 10.163.65.115.57897 > 104.245.60.191.3478: UDP, length 4408:50:50.288373     bond0.65[in ]: 10.163.65.115.49918 > 104.245.60.191.3478: UDP, length 44
08:50:52.302424     bond0.65[in ]: 10.163.65.115.57897 > 104.245.60.191.3478: UDP, length 44
08:50:52.302430     bond0.65[in ]: 10.163.65.115.49918 > 104.245.60.191.3478: UDP, length 44
08:50:54.327942     bond0.65[in ]: 10.163.65.115.57897 > 104.245.60.191.3478: UDP, length 44
08:50:54.327946     bond0.65[in ]: 10.163.65.115.49918 > 104.245.60.191.3478: UDP, length 44
08:50:56.377815     bond0.65[in ]: 10.163.65.115.57897 > 104.245.60.191.3478: UDP, length 44
08:50:56.377856     bond0.65[in ]: 10.163.65.115.49918 > 104.245.60.191.3478: UDP, length 44
08:50:58.344778     bond0.65[in ]: 10.163.65.115.57897 > 104.245.60.191.3478: UDP, length 44
08:50:58.344828     bond0.65[in ]: 10.163.65.115.49918 > 104.245.60.191.3478: UDP, length 44
08:51:00.399594     bond0.65[in ]: 10.163.65.115.57897 > 104.245.60.191.3478: UDP, length 44
08:51:00.399602     bond0.65[in ]: 10.163.65.115.49918 > 104.245.60.191.3478: UDP, length 44
08:51:02.442419     bond0.65[in ]: 10.163.65.115.57897 > 104.245.60.191.3478: UDP, length 44
08:51:02.442427     bond0.65[in ]: 10.163.65.115.49918 > 104.245.60.191.3478: UDP, length 44
Photo of Robert Jerina

Robert Jerina

  • 2,470 Points 2k badge 2x thumb
Was this information helpful?
Photo of Mike

Mike, Official Rep

  • 94,790 Points 50k badge 2x thumb
Hi Robert,. Just letting you know we haven't forgot about you.  I'll try to get you an update. 
Photo of Robert Jerina

Robert Jerina

  • 2,470 Points 2k badge 2x thumb
Thanks, Mike.
Photo of Robert Jerina

Robert Jerina

  • 2,470 Points 2k badge 2x thumb
Any updates on this?
Photo of Mike

Mike, Official Rep

  • 94,790 Points 50k badge 2x thumb
Hi Robert,  Sorry for the delay. We've had to do some research and verify info on our end. You should hear something before the day is over. thanks for your patience. 
Photo of John Tran

John Tran, QoS Network Analyst

  • 350 Points 250 badge 2x thumb
Hi Robert.  We apologized for the delay in response.  UDP ports 3478 and 3479, are legitimate ports being used by our RingCentral Meetings app.  Please do allow access to both ports in/out of your network as appropriate (and/or as needed).  We will be adding these two UDP-based ports to our requirements documentation going forward.  Thank you, again, for bringing up the matter.
Photo of Robert Jerina

Robert Jerina

  • 2,470 Points 2k badge 2x thumb
OK. Thanks, John. We'll get these ports added into our firewall.

This conversation is no longer open for comments or replies.