Zoom network firewall or proxy server settings

If your app stays in a "connecting" mode or has timed out due to Network error, please try again or Can't connect to our service, please check your network connection and try again issues, it could be related to your network connection, network firewall settings, or web security gateway settings.

Note: Check your network connection by opening a browser and ensure that you can access https://zoom.us.

Table of Contents

Zoom firewall rules

To configure your network firewall, please see the following table. The following rules should be applied to outbound traffic. Zoom will communicate to the destination port received when the client makes its connection. The firewall should be configured to allow these return connections.

Firewall rules for Zoom

ProtocolPortsSourceDestination
TCP80, 443All Zoom Clients
User's web browser
*.zoom.us 
*.zoom.com

Firewall rules for Zoom Meetings and Webinars

ProtocolPortsSourceDestination
TCP443, 8801, 8802All Zoom clients

IPv4:

3.7.35.0/25
3.21.137.128/25
3.25.41.128/25
3.80.20.128/25
3.104.34.128/25
3.120.121.0/25
3.127.194.128/25
3.208.72.0/25
3.235.71.128/25
3.235.72.128/25
3.235.73.0/25
3.235.82.0/23
3.235.96.0/23
4.34.125.128/25
4.35.64.128/25
8.5.128.0/23
13.52.6.128/25
15.220.80.0/24
15.220.81.0/25
18.254.23.128/25
18.254.61.0/25
20.203.158.80/28
20.203.190.192/26
50.239.202.0/23
50.239.204.0/24
52.61.100.128/25
52.202.62.192/26
64.125.62.0/24
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
69.174.108.0/22
99.79.20.0/25
101.36.167.0/24
101.36.170.0/23
103.122.166.0/23
111.33.115.0/25
111.33.181.0/25
115.110.154.192/26
115.114.56.192/26
115.114.115.0/26
115.114.131.0/26
120.29.148.0/24
121.244.146.0/27
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
160.1.56.128/25
161.199.136.0/22
162.12.232.0/22
162.255.36.0/22
165.254.88.0/23
166.108.64.0/18
170.114.0.0/16
173.231.80.0/20
192.204.12.0/22
198.251.128.0/17
202.177.207.128/27
203.200.219.128/27
204.80.104.0/21
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
213.244.140.0/24
221.122.63.0/24
221.122.64.0/24
221.122.88.64/27
221.122.88.128/25
221.122.89.128/25
221.123.139.192/27


IPv6:
2407:30C0::/32
2600:9000:2600::/48
2620:123:2000::/40

UDP3478, 3479, 8801 - 8810All Zoom clients

IPv4:

3.7.35.0/25
3.21.137.128/25
3.25.41.128/25
3.80.20.128/25
3.104.34.128/25
3.120.121.0/25
3.127.194.128/25
3.208.72.0/25
3.235.71.128/25
3.235.72.128/25
3.235.73.0/25
3.235.82.0/23
3.235.96.0/23
4.34.125.128/25
4.35.64.128/25
8.5.128.0/23
13.52.6.128/25
15.220.80.0/24
15.220.81.0/25
18.254.23.128/25
18.254.61.0/25
20.203.158.80/28
20.203.190.192/26
50.239.202.0/23
50.239.204.0/24
52.61.100.128/25
52.202.62.192/26
64.125.62.0/24
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
69.174.108.0/22
99.79.20.0/25
101.36.167.0/24
101.36.170.0/23
103.122.166.0/23
111.33.115.0/25
111.33.181.0/25
115.110.154.192/26
115.114.56.192/26
115.114.115.0/26
115.114.131.0/26
120.29.148.0/24
121.244.146.0/27
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
160.1.56.128/25
161.199.136.0/22
162.12.232.0/22
162.255.36.0/22
165.254.88.0/23
166.108.64.0/18
170.114.0.0/16
173.231.80.0/20
192.204.12.0/22
198.251.128.0/17
202.177.207.128/27
203.200.219.128/27
204.80.104.0/21
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
213.244.140.0/24
221.122.63.0/24
221.122.64.0/24
221.122.88.64/27
221.122.88.128/25
221.122.89.128/25
221.123.139.192/27


IPv6:
2407:30C0::/32
2600:9000:2600::/48
2620:123:2000::/40

Firewall rules for Zoom Phone

note icon
In March 2025, Poly will update and consolidate its Zero Touch Provisioning (ZTP) servers to enhance provisioning efficiency and performance for all eligible Poly device models. Following this update, eligible devices will automatically connect to the new ZTP servers for provisioning. To ensure a seamless transition, you must allow network access and ensure your network permits eligible Poly devices to communicate with the new ZTP servers and associated platforms. Review documentation from Poly to confirm your network configuration aligns with the updated requirements. Prepare your network ahead of time to avoid disruptions in device provisioning. Devices that are unable to access the new ZTP servers due to network restrictions or improper configuration will fail to provision correctly.
Note: There may be a possible period of time when the ZTP service is not available. The maintenance window will be the first week of March. For more information, visit this page.

Notes:

ProtocolPortsSourceDestination

TCP

443

All Zoom Clients,
User's web browser

IPv4:

64.211.144.0/24
64.224.32.0/19
69.174.108.0/22
103.122.166.0/23
120.29.148.0/24
134.224.0.0/16
137.66.128.0/17
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
159.124.0.0/16
162.12.232.0/22
170.114.0.0/16
173.231.80.0/20
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24


IPv6:

2620:123:2000::/40

TCP

5091

All Zoom clients

IPv4:

8.5.128.0/24
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
101.36.167.0/24
103.122.166.0/23
120.29.148.0/24
137.66.128.0/17
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
162.12.232.0/22
170.114.0.0/16
173.231.92.0/24
173.231.94.0/24
192.204.12.0/22
206.247.0.0/16
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
213.244.140.0/24
221.122.63.0/24


IPv6:

2620:123:2000::/40

TCP

390 (see note)

All Zoom clients

IPv4:

134.224.0.0/16
170.114.0.0/16

UDP

20000-64000

All Zoom Clients

IPv4:

64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
101.36.167.0/24
103.122.166.0/23
115.117.119.96/27
121.244.146.0/27
121.244.203.192/27
137.66.128.0/17
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
162.12.232.0/22
170.114.0.0/16
173.231.92.0/24
173.231.94.0/24
203.200.219.128/27
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
213.19.144.0/24
213.244.140.0/24
221.122.63.0/24


IPv6:

2620:123:2000::/40

Firewall rules for Zoom Contact Center

note icon
In addition to the firewall rules below, administrators must apply the Zoom firewall rules for Zoom Meetings and Webinars.
ProtocolPortsSourceDestination

UDP

20000-64000

All Zoom Clients

IPv4:

50.239.204.0/24 
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
170.114.0.0/16
204.80.104.0/21
206.247.0.0/16


IPv6:

2620:123:2000::/40

TCP

443

All Zoom Clients, 
User's web browser

IPv4:

3.21.137.128/25
3.235.96.0/23
50.239.204.0/24
103.122.166.0/23
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
170.114.0.0/16
204.80.104.0/21
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24


IPv6:

2620:123:2000::/40

TCP

5091

All Zoom Clients

IPv4:

50.239.204.0/24
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
170.114.0.0/16
204.80.104.0/21
206.247.0.0/16


IPv6:

2620:123:2000::/40

TCP

443

IPv4:

3.18.202.127
3.20.188.102
3.66.90.39
3.66.90.206
3.70.50.178
3.141.189.66
3.235.96.0/23
3.237.150.230
44.212.128.71
44.198.173.62
79.72.1.202
80.225.76.19
84.8.104.187
84.8.110.17
134.224.0.0/16
170.114.0.0/16

Specified endpoint from Network requests defined in Zoom Contact Center Flow Script widget and HTTP Call Widget

Firewall rules for Zoom Virtual Agent

ProtocolPortsSourceDestination

TCP

443

User's web browser

IPv4:

170.114.0.0/16
134.224.0.0/16

TCP

443

IPv4:

170.114.0.0/16
134.224.0.0/16

Specified endpoint from 3rd party CRM to transfer to an agent or submit tickets

TCP

443

IPv4:

3.70.48.137
3.71.118.107
3.71.118.247
3.131.46.142
18.117.23.89
18.190.5.190
44.192.141.173
44.198.248.247
44.199.223.201 
79.72.1.202
80.225.76.19
84.8.104.187
84.8.110.17

Specified endpoint from Network requests defined in Zoom Virtual Agent Flow Script widget

TCP

443

IPv4:

3.12.25.1
3.12.48.211
3.12.140.78
3.66.90.191
3.70.50.147
18.159.148.60
44.198.248.168
44.199.223.208
44.199.239.85
79.72.2.74
84.8.121.192

Specified endpoint from Network requests defined in Zoom Virtual Agent HTTP call widget, AI expert assist, and knowledge base to sync content

Firewall rules for Zoom Support and Community

ProtocolPortsSourceDestination

TCP

80, 443

User's web browser

*.zoom.us 
*.zoom.com

Firewall rules for Zoom Apps created by Zoom

ProtocolPortsSourceDestination

TCP

443

All Zoom Clients 
User's web browser

*.zoomapp.cloud

Firewall rules for certificate validation

The Zoom Client requires allowing the following URLs for certificate validation.

ProtocolPortsSourceDestination

HTTP

80

Zoom client

crl3.digicert.com 
crl4.digicert.com
ocsp.digicert.com
crl.entrust.net
certificates.godaddy.com
crl.godaddy.com
ocsp.godaddy.com
certificates.starfieldtech.com
crl.starfieldtech.com
ocsp.starfieldtech.com
ocsp.sectigo.com
ocsp.usertrust.com
ocsp.comodoca.com
crl.sectigo.com
crl.usertrust.com
crl.comodoca.com

Zoom CDN

The Zoom CDN is used to optimize the delivery of files related to the Zoom platform, such as customer meeting recordings, static web assets, Zoom clients, and Zoom Phone firmware downloads.

ProtocolPortsSourceDestination

HTTPS

443

The user's web browser
Zoom Certified Hardware (Zoom Room hardware, Zoom Phone hardware, etc.)

IPv4:

52.84.151.0/24 
170.114.45.0/24
170.114.46.0/24


IPv6:

2407:30c0:180::/48 
2407:30c0:181::/48
2600:9000:2600::/48

Zoom Device Management (ZDM)

Zoom Device Management(ZDM) is a device management tool, that allows you to manage your Zoom Rooms, devices, and Zoom apps without having to physically engage with each device. If your company network includes firewall or proxy servers, you will need to add this ZDM URL to your allowed list of network domains to allow communication with the ZDM server:

https://zdmapi.zoom.us

IP ranges txt files

IP ranges to be allowed can also be downloaded in txt file format:

Proxy server

We support HTTPS/SSL proxy servers via port 443 for Zoom traffic.

Note: This does not apply to the Zoom Phone service.

Zoom automatically detects your proxy settings. In some instances, you may be prompted to enter the proxy username/password.

Note: We recommend allowing zoom.us and *.zoom.us from proxy or SSL inspection.

Firewall rules for other Zoom services

note icon
On Zoom Status, Zoom announces scheduled maintenance when IP address updates are planned. Customers can view the relevant posts on Zoom Status to check which IP address ranges were modified and subscribe via email or SMS to get a notification for IP range updates and other important Zoom updates. This article only includes current IP address ranges.