Zoom network firewall or proxy server settings
If your app stays in a "connecting" mode or has timed out due to Network error, please try again or Can't connect to our service, please check your network connection and try again issues, it could be related to your network connection, network firewall settings, or web security gateway settings.
Note: Check your network connection by opening a browser and ensure that you can access https://zoom.us.
Zoom firewall rules
To configure your network firewall, please see the following table. The following rules should be applied to outbound traffic. Zoom will communicate to the destination port received when the client makes its connection. The firewall should be configured to allow these return connections.
Firewall rules for Zoom
| Protocol | Ports | Source | Destination |
|---|
| TCP | 80, 443 | All Zoom Clients
User's web browser | *.zoom.us
*.zoom.com |
Firewall rules for Zoom Meetings and Webinars
| Protocol | Ports | Source | Destination |
|---|
| TCP | 443, 8801, 8802 | All Zoom clients |
IPv4:
3.7.35.0/25
3.21.137.128/25
3.25.41.128/25
3.80.20.128/25
3.104.34.128/25
3.120.121.0/25
3.127.194.128/25
3.208.72.0/25
3.235.71.128/25
3.235.72.128/25
3.235.73.0/25
3.235.82.0/23
3.235.96.0/23
4.34.125.128/25
4.35.64.128/25
8.5.128.0/23
13.52.6.128/25
15.220.80.0/24
15.220.81.0/25
18.254.23.128/25
18.254.61.0/25
20.203.158.80/28
20.203.190.192/26
50.239.202.0/23
50.239.204.0/24
52.61.100.128/25
52.202.62.192/26
64.125.62.0/24
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
69.174.108.0/22
99.79.20.0/25
101.36.167.0/24
101.36.170.0/23
103.122.166.0/23
111.33.115.0/25
111.33.181.0/25
115.110.154.192/26
115.114.56.192/26
115.114.115.0/26
115.114.131.0/26
120.29.148.0/24
121.244.146.0/27
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
160.1.56.128/25
161.199.136.0/22
162.12.232.0/22
162.255.36.0/22
165.254.88.0/23
166.108.64.0/18
170.114.0.0/16
173.231.80.0/20
192.204.12.0/22
198.251.128.0/17
202.177.207.128/27
203.200.219.128/27
204.80.104.0/21
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
213.244.140.0/24
221.122.63.0/24
221.122.64.0/24
221.122.88.64/27
221.122.88.128/25
221.122.89.128/25
221.123.139.192/27
IPv6:
2407:30C0::/32
2600:9000:2600::/48
2620:123:2000::/40
|
| UDP | 3478, 3479, 8801 - 8810 | All Zoom clients |
IPv4:
3.7.35.0/25
3.21.137.128/25
3.25.41.128/25
3.80.20.128/25
3.104.34.128/25
3.120.121.0/25
3.127.194.128/25
3.208.72.0/25
3.235.71.128/25
3.235.72.128/25
3.235.73.0/25
3.235.82.0/23
3.235.96.0/23
4.34.125.128/25
4.35.64.128/25
8.5.128.0/23
13.52.6.128/25
15.220.80.0/24
15.220.81.0/25
18.254.23.128/25
18.254.61.0/25
20.203.158.80/28
20.203.190.192/26
50.239.202.0/23
50.239.204.0/24
52.61.100.128/25
52.202.62.192/26
64.125.62.0/24
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
69.174.108.0/22
99.79.20.0/25
101.36.167.0/24
101.36.170.0/23
103.122.166.0/23
111.33.115.0/25
111.33.181.0/25
115.110.154.192/26
115.114.56.192/26
115.114.115.0/26
115.114.131.0/26
120.29.148.0/24
121.244.146.0/27
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
160.1.56.128/25
161.199.136.0/22
162.12.232.0/22
162.255.36.0/22
165.254.88.0/23
166.108.64.0/18
170.114.0.0/16
173.231.80.0/20
192.204.12.0/22
198.251.128.0/17
202.177.207.128/27
203.200.219.128/27
204.80.104.0/21
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
213.244.140.0/24
221.122.63.0/24
221.122.64.0/24
221.122.88.64/27
221.122.88.128/25
221.122.89.128/25
221.123.139.192/27
IPv6:
2407:30C0::/32
2600:9000:2600::/48
2620:123:2000::/40
|
Firewall rules for Zoom Phone
In March 2025, Poly will update and consolidate its Zero Touch Provisioning (ZTP) servers to enhance provisioning efficiency and performance for all eligible Poly device models. Following this update, eligible devices will automatically connect to the new ZTP servers for provisioning. To ensure a seamless transition, you must allow network access and ensure your network permits eligible Poly devices to communicate with the new ZTP servers and associated platforms. Review
documentation from Poly to confirm your network configuration aligns with the updated requirements. Prepare your network ahead of time to avoid disruptions in device provisioning. Devices that are unable to access the new ZTP servers due to network restrictions or improper configuration will fail to provision correctly.
Note: There may be a possible period of time when the ZTP service is not available. The maintenance window will be the first week of March. For more information,
visit this page.
Notes:
| Protocol | Ports | Source | Destination |
|---|
|
TCP
|
443
|
All Zoom Clients,
User's web browser
|
IPv4:
64.211.144.0/24
64.224.32.0/19
69.174.108.0/22
103.122.166.0/23
120.29.148.0/24
134.224.0.0/16
137.66.128.0/17
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
159.124.0.0/16
162.12.232.0/22
170.114.0.0/16
173.231.80.0/20
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
IPv6:
2620:123:2000::/40
|
|
TCP
|
5091
|
All Zoom clients
|
IPv4:
8.5.128.0/24
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
101.36.167.0/24
103.122.166.0/23
120.29.148.0/24
137.66.128.0/17
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
162.12.232.0/22
170.114.0.0/16
173.231.92.0/24
173.231.94.0/24
192.204.12.0/22
206.247.0.0/16
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
213.244.140.0/24
221.122.63.0/24
IPv6:
2620:123:2000::/40
|
|
TCP
|
390 (see note)
|
All Zoom clients
|
IPv4:
134.224.0.0/16
170.114.0.0/16
|
|
UDP
|
20000-64000
|
All Zoom Clients
|
IPv4:
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
101.36.167.0/24
103.122.166.0/23
115.117.119.96/27
121.244.146.0/27
121.244.203.192/27
137.66.128.0/17
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
162.12.232.0/22
170.114.0.0/16
173.231.92.0/24
173.231.94.0/24
203.200.219.128/27
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
213.19.144.0/24
213.244.140.0/24
221.122.63.0/24
IPv6:
2620:123:2000::/40
|
In addition to the firewall rules below, administrators must apply the Zoom firewall rules for
Zoom Meetings and Webinars.
| Protocol | Ports | Source | Destination |
|---|
|
UDP
|
20000-64000
|
All Zoom Clients
|
IPv4:
50.239.204.0/24
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
170.114.0.0/16
204.80.104.0/21
206.247.0.0/16
IPv6:
2620:123:2000::/40
|
|
TCP
|
443
|
All Zoom Clients,
User's web browser
|
IPv4:
3.21.137.128/25
3.235.96.0/23
50.239.204.0/24
103.122.166.0/23
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
170.114.0.0/16
204.80.104.0/21
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24
IPv6:
2620:123:2000::/40
|
|
TCP
|
5091
|
All Zoom Clients
|
IPv4:
50.239.204.0/24
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
170.114.0.0/16
204.80.104.0/21
206.247.0.0/16
IPv6:
2620:123:2000::/40
|
|
TCP
|
443
|
IPv4:
3.18.202.127
3.20.188.102
3.66.90.39
3.66.90.206
3.70.50.178
3.141.189.66
3.235.96.0/23
3.237.150.230
44.212.128.71
44.198.173.62
79.72.1.202
80.225.76.19
84.8.104.187
84.8.110.17
134.224.0.0/16
170.114.0.0/16
|
Specified endpoint from Network requests defined in Zoom Contact Center Flow Script widget and HTTP Call Widget
|
Firewall rules for Zoom Virtual Agent
| Protocol | Ports | Source | Destination |
|---|
|
TCP
|
443
|
User's web browser
|
IPv4:
170.114.0.0/16
134.224.0.0/16
|
|
TCP
|
443
|
IPv4:
170.114.0.0/16
134.224.0.0/16
|
Specified endpoint from 3rd party CRM to transfer to an agent or submit tickets
|
|
TCP
|
443
|
IPv4:
3.70.48.137
3.71.118.107
3.71.118.247
3.131.46.142
18.117.23.89
18.190.5.190
44.192.141.173
44.198.248.247
44.199.223.201
79.72.1.202
80.225.76.19
84.8.104.187
84.8.110.17
|
Specified endpoint from Network requests defined in Zoom Virtual Agent Flow Script widget
|
|
TCP
|
443
|
IPv4:
3.12.25.1
3.12.48.211
3.12.140.78
3.66.90.191
3.70.50.147
18.159.148.60
44.198.248.168
44.199.223.208
44.199.239.85
79.72.2.74
84.8.121.192
|
Specified endpoint from Network requests defined in Zoom Virtual Agent HTTP call widget, AI expert assist, and knowledge base to sync content
|
Firewall rules for Zoom Support and Community
| Protocol | Ports | Source | Destination |
|---|
|
TCP
|
80, 443
|
User's web browser
|
*.zoom.us
*.zoom.com
|
Firewall rules for Zoom Apps created by Zoom
| Protocol | Ports | Source | Destination |
|---|
|
TCP
|
443
|
All Zoom Clients
User's web browser
|
*.zoomapp.cloud
|
Firewall rules for certificate validation
The Zoom Client requires allowing the following URLs for certificate validation.
| Protocol | Ports | Source | Destination |
|---|
|
HTTP
|
80
|
Zoom client
|
crl3.digicert.com
crl4.digicert.com
ocsp.digicert.com
crl.entrust.net
certificates.godaddy.com
crl.godaddy.com
ocsp.godaddy.com
certificates.starfieldtech.com
crl.starfieldtech.com
ocsp.starfieldtech.com
ocsp.sectigo.com
ocsp.usertrust.com
ocsp.comodoca.com
crl.sectigo.com
crl.usertrust.com
crl.comodoca.com
|
Zoom CDN
The Zoom CDN is used to optimize the delivery of files related to the Zoom platform, such as customer meeting recordings, static web assets, Zoom clients, and Zoom Phone firmware downloads.
| Protocol | Ports | Source | Destination |
|---|
|
HTTPS
|
443
|
The user's web browser
Zoom Certified Hardware (Zoom Room hardware, Zoom Phone hardware, etc.)
|
IPv4:
52.84.151.0/24
170.114.45.0/24
170.114.46.0/24
IPv6:
2407:30c0:180::/48
2407:30c0:181::/48
2600:9000:2600::/48
|
Zoom Device Management (ZDM)
Zoom Device Management(ZDM) is a device management tool, that allows you to manage your Zoom Rooms, devices, and Zoom apps without having to physically engage with each device. If your company network includes firewall or proxy servers, you will need to add this ZDM URL to your allowed list of network domains to allow communication with the ZDM server:
https://zdmapi.zoom.us
IP ranges txt files
IP ranges to be allowed can also be downloaded in txt file format:
Proxy server
We support HTTPS/SSL proxy servers via port 443 for Zoom traffic.
Note: This does not apply to the Zoom Phone service.
Zoom automatically detects your proxy settings. In some instances, you may be prompted to enter the proxy username/password.
Note: We recommend allowing zoom.us and *.zoom.us from proxy or SSL inspection.
Firewall rules for other Zoom services
On
Zoom Status, Zoom announces scheduled maintenance when IP address updates are planned. Customers can view the relevant posts on Zoom Status to check which IP address ranges were modified and subscribe via email or SMS to get a notification for IP range updates and other important Zoom updates. This article only includes current IP address ranges.
