PLEASE NOTE: We are updating our IP address policy. Review Lifesize Internet Network Access Requirements for the latest information and adjust your firewall and DNS settings.
If Lifesize clients (including Icon) have trouble connecting to the cloud-based service, ensure your network is configured properly.
If you have configured a web proxy, confirm that the following domains are whitelisted: *.lifesize.com, lifesizecloud.com, jwpsrv.com, ssl.p.jwpcdn.com, jwpltx.com, and cloudfront.net. NOTE: If you are unable to whitelist the wildcards, see Subdomains for more information.
NOTE: The following ports assume a stateful firewall with symmetric UDP enabled.
For a list of IP addresses Lifesize uses, refer to this IP Address list.
Lifesize systems and apps connected to the Lifesize cloud-based service
Confirm your firewall allows outbound access from your network to the following destination ports.
Protocol |
Source IP |
Source Port |
Destination IP |
Destination Port |
Description |
TCP |
Any |
Any |
Whitelist domains
*.lifesizecloud.com and
*.lifesize.com
NOTE: If you are unable to whitelist the wildcards, see Subdomains for more information.
|
80 |
HTTP: Lifesize app download and software updates
NOTE: Redirects to admin console download page. |
TCP |
Any |
Any |
Whitelist domains
*.lifesizecloud.com
and *.lifesize.com
NOTE: If you are unable to whitelist the wildcards, see Subdomains for more information.
|
443 |
HTTPS: Lifesize desktop app, web app, log in, directory, chat, presence, provisioning, Icon health monitoring, calendar integration, and Direct Media
Required for HTTP Proxy
|
TCP |
Any |
Any |
Whitelist domain sdk.split.io |
443 |
HTTPS: New feature control |
TCP |
Any |
Any |
Whitelist domain*.walkme.com
NOTE: If you are unable to whitelist the wildcards, see Subdomains for more information.
|
443 |
HTTPS: In-app documentation and guides
|
TCP |
Any |
Any |
Whitelist domains
jwpsrv.com,
ssl.p.jwpcdn.com,
jwpltx.com,
twilio.com
and cloudfront.net
|
443 |
HTTPS: Lifesize app streaming and playback, and Q&A during live streaming |
TCP |
Any |
Any |
Whitelist domains
primlb.lifesizecloud.com
|
5222 |
Icon presence
Required for HTTP Proxy
|
TCP |
Any |
Any |
View IP Address
|
35061 |
Lifesize signaling (SIP/TLS) |
UDP |
Any |
Any |
View IP Address
|
10000-28000 |
SRTP media
Required for HTTP Proxy
|
UDP |
Any |
Any |
View IP Address
|
3478 |
Direct media (point-to-point) |
Skype for Business Online
Confirm your firewall allows outbound access from your network to the following destination ports.
NOTE: These ports are in addition to those recommended by Microsoft for full operation of your Skype for Business solution.
Protocol |
Source IP |
Source Port |
Detination IP |
Destination Port |
Description |
TCP/UDP |
Any |
Any |
View IP Address
|
30000-50000 |
Client A/V Media |
On-premise Microsoft Lync and Skype for Business
Confirm your firewall allows outbound access from your network to the following destination ports.
NOTE: These ports are in addition to those recommended by Microsoft for full operation of your Skype for Business solution.
Protocol |
Source IP |
Source Port |
Destination IP |
Destination Port |
Description |
TCP/UDP |
Any |
Any |
View IP Address
|
30000-50000 |
Client A/V Media |
TCP |
Edge Server |
5061 |
View IP Address
|
5061 |
Edge Server Call Signaling |
TCP/UDP |
Edge Server |
50000-59999 |
View IP Address
|
30000-50000 |
Edge Server A/V Media |
Read more about Microsoft Lync and Skype for Business Federation with the Lifesize cloud-based service.
For third-party guest systems using SIP
Confirm your firewall allows outbound access from your network to the following destination ports.
Static NAT and inbound ports may also be required. Check the manufacturers specifications.
Protocol |
Source IP |
Source Port |
Destination IP |
Destination Port |
Description |
TCP/UDP |
Any |
Any |
View IP Address
|
5060 |
SIP/TLS |
UDP |
Any |
Any |
View IP Address
|
10000-28000 |
RTP media |
For third-party guest systems using H.323
Confirm your firewall allows outbound access from your network to the following destination ports.
Static NAT and inbound ports may also be required. Check the manufacturer's specifications.
Protocol |
Source IP |
Source Port |
Destination IP |
Destination Port |
Description |
TCP |
Any |
Any |
View IP Address
|
1720 |
H.225: call signaling |
TCP |
Any |
Any |
View IP Address
|
10000-16000 |
H.245: control channel |
UDP |
Any |
Any |
View IP Address
|
10000-28000 |
RTP media if 3rd party device is not configured for encryption. SRTP media if 3rd party device is configured for encryption |
For approved third-party Polycom or Cisco systems using H.460
Confirm your firewall allows outbound access from your network to the following destination ports.
Check the manufacturer’s specifications.
Protocol |
Source IP |
Source Port |
Destination IP |
Destination Port |
Description |
UDP |
Third-party system |
1719 |
Lifesize H.460 server
|
1719 |
H.460/RAS signaling |
TCP |
Third-party system |
Any |
Lifesize H.460 server
|
1720 |
H.460/H.225.0/Q.931 call setup signaling
|
TCP |
Third-party system |
Any |
Lifesize H.460 server |
20000-20200 |
H.460/H.245 call control signaling |
UDP |
Third-party system |
Any |
Lifesize H.460 server |
6768, 6769 |
H.460.19 Multiplexed RTP/RTCP media. SRTP will be used if the 3rd party device is configured to use encryption.
|
TCP |
Third-party system |
Any |
ldapexport.lifesizecloud.com
|
389 |
Authenticated LDAP (non-TLS) directory services |
TCP |
Third-party system |
Any |
ldapexport.lifesizecloud.com
|
636 |
Authenticated LDAPS (TLS) directory services |
TCP |
Third-party system |
Any |
soapexport.lifesizecloud.com |
80 |
Authenticated SOAP (HTTP) directory services |
TCP |
Third-party system |
Any |
soapexport.lifesizecloud.com |
443 |
Authenticated SOAP (HTTPS) directory services |