This reference article lists the ports required for access to specific services for VoIP phones under BYOC Premises. For more information on other ports and services you may need to configure on your firewall, see About ports and services for your firewall. 

Services Transport/Port (Application) Destination Description
Zero-Touch Provisioning tcp/443 (HTTPS) Polycom ZTP† The secure connection an unconfigured Polycom device will make to discover its initial configuration.
Configuration provisioning

tcp/80 (HTTP)

tcp/443 (HTTPS)

 Genesys Cloud Global Phone Provisioning (AWS) The connection a phone makes for organization level configuration. The connection can optionally be secured.

tcp/8088 (HTTP)* [legacy]

tcp/8089 (HTTPS)*[legacy]

tcp/80(HTTP)*

tcp/443 (HTTPS)*

 Genesys Cloud Edge devices The connection a phone makes for VoIP configuration. The connection can optionally be secured.
Signaling

udp/8060 (SIP)*

tcp/8060 (SIP)*

tcp/8061 (SIPS)*

 Genesys Cloud Edge devices The connection for VoIP signaling (dialing, ringing, etc. for inbound and outbound calls). The connection can optionally be secured.
Media udp/16384-32768 (RTP/SRTP) Genesys Cloud Edge devices The transmission of streaming media (audio). The connection can optionally be secured.
* Default ranges; ports can be changed in the Genesys Cloud configuration.

† Third-party service; not hosted by Genesys Cloud.

Date Revision
December 14, 2020 Broke out the main sections of the larger Ports and services for your firewall article into smaller articles. Created this article to cover the ports and services for VoIP phones under BYOC Premises.