It seems that UDP ports is the only way to get SIP traffic in/out of the Desktop App and Web App. Unlike RingCentral's competitors like Webex/Zoom there is no TCP fallback option when UDP is not available. Some organizations block UDP by default and the security teams are unwillling to open these up to the internet.
When can we get this on the RingCentral backlog?