Ports and services for Genesys Cloud clients

IMMEDIATE ACTION REQUIRED: To ensure the business continuity of your Genesys Cloud organization, read the entire 2024 Genesys CIDR expansion and firewall requirements notification article and then run all applicable tests to confirm your organization’s readiness for the new CIDR IP address range and the RTP port expansion.

This reference article lists the ports required for access to specific services in the Genesys Cloud browser client, the Genesys Cloud desktop app, and the Genesys Cloud Background Assistant. For more information on other ports and services you may need to configure on your firewall, see About ports and services for your firewall.

Services	Transport/Port (Application)	Destination	Description
All	tcp/443 (HTTPS/WSS)	Genesys Cloud, Amazon AWS	The secure connection from your client to the Genesys Cloud Services on the public Internet.
Video chat Screen share Screen recording	tcp/3478 (STUN) udp/3478 (STUN) tcp/19302 (STUN)^† udp/19302 (STUN)^†	Genesys Cloud, Amazon AWS Google^*	Session Traversal Utilities for NAT (STUN) is an egress connection that informs a host of its public IP address used for media-based communications.
Video chat Screen share Screen recording	udp/16384-32768 (SRTP)	Genesys Cloud, Amazon AWS	The secured transmission of streaming media (audio and video).
Screen recording	tcp/8191 (HTTPS)	Genesys Cloud Background Assistant running on localhost loopback address (127.0.0.1)	Secure connection from a Genesys Cloud browser client to the Genesys Cloud Background Assistant to facilitate screen recording.
WebRTC signaling	tcp/3478 (STUN)^‡ udp/3478 (STUN) tcp/19302 (STUN)^† udp/19302 (STUN)^†	Genesys Cloud, Amazon AWS Google^*	These ports must be opened for both the client and Edges. These are used for the srflx and relay candidates. If they are closed, calls will have a high rate of failure.
WebRTC Media	udp/16384-32768 (SRTP/TURN)	Genesys Cloud Edge devices, Genesys Cloud, Amazon AWS	The transmission of secured streaming media (audio).

* Third-party service – not hosted by Genesys Cloud.

† Optional – For more information, see Does port 19302 for Google’s STUN need to be open?

‡ Not currently in use, but should be open and reserved for future use.

Revision history

Modified date (YYYY-MM-DD)	Revision
2024-11-18	Updated the status of tcp/3478 (STUN) Transport/Port for the WebRTC signaling service.
2022-11-02	Added the screen recording row with the Genesys Cloud Background Assistant destination.
2020-12-14	Broke out the main sections of the larger Ports and services for your firewall article into smaller articles. Created this article to cover the ports and services for Genesys Cloud clients.