Firewall and network config

This guide, for IT teams, explains how to configure your network so that people can use Attend Anywhere. After reading this guide, you’ll know the TCP and UDP ports you need to open in your firewall.

When people use Attend Anywhere from your organisation’s network, they need to access to the Attend Anywhere site and the services that it depends on. In this guide we use the following requirement levels for network access:

Required: Attend Anywhere doesn’t work without this network access.
Recommended: Improves the user experience for patients and providers.
Optional: Performance and quality monitoring which help us fix problems.

Firewall ports

Attend Anywhere uses WebRTC (Web real-time communication) and HTTPS to transfer video-call data between devices. Check that your firewall opens the destination ports shown in the following tables.

Individual appointments

Allow the following destination ports on your firewall:

Requirement	Destinations	Ports	Usage
Required	52.49.123.201 52.213.35.238 35.177.237.5 35.179.41.66 52.56.101.249	UDP/3478 TCP/3478 TCP/443	High-quality video and audio data for calls use port 3478. Lower-bandwidth versions of the data use port 443.
Required	99.77.128.0/18	UDP/3478 TCP/443	Video and audio data for next-generation calls.

Group consultations

Allow the following destination ports on your firewall:

Requirement	Destinations	Ports	Usage
Required	140.238.95.196 130.61.64.185 193.122.11.14 152.67.128.56 158.101.192.6 193.123.38.193	UDP/443 TCP/443	WebRTC’s relay (TURN) servers which help route video and audio data.
Required	3.9.41.96/27 152.67.144.0/24 3.123.12.160/27 3.126.60.32/27 130.61.162.0/24	UDP/10000 UDP/443 TCP/443	Video data for calls.

Web access

If your organisation uses a web filter or your firewall blocks HTTPS connections (TCP port 443) by default, you need to allow access to the sites shown in the following tables.

Calls and management console

Tip. If you don't want to include wildcard domains (the * symbol) for Amazon Web Services (AWS) in your firewall, use the AWS IP address ranges. Find IP addresses for the CHIME_MEETINGS, CLOUDFRONT or S3 services in the eu-west-2 region. To help keep your config up to date, we recommend subscribing to AWS change notifications.