Zoom network firewall or proxy server settings

note icon
On Zoom Status , Zoom announces scheduled maintenance when IP address updates are planned. Customers can view the relevant posts on Zoom Status to check which IP address ranges were modified and subscribe via email or SMS to get a notification for IP range updates and other important Zoom updates. This article only includes current IP address ranges.  

If your app stays in a "connecting" mode or has timed out due to Network error, please try again or Can't connect to our service, please check your network connection and try again  issues, it could be related to your network connection, network firewall settings, or web security gateway settings.

Note : Check your network connection by opening a browser and ensure that you can access https://zoom.us

This article covers:

Zoom firewall rules

To configure your network firewall, please see the following table. The following rules should be applied to outbound traffic. Zoom will communicate to the destination port received when the client makes its connection. The firewall should be configured to allow these return connections.

ProtocolPortsSourceDestination
TCP80,443All Zoom clients*.zoom.us
TCP443, 8801, 8802All Zoom clients

IPv4:

3.7.35.0/25
3.21.137.128/25
3.25.41.128/25
3.80.20.128/25
3.104.34.128/25
3.120.121.0/25
3.127.194.128/25
3.208.72.0/25
3.235.71.128/25
3.235.72.128/25
3.235.73.0/25
3.235.82.0/23
3.235.96.0/23
4.34.125.128/25
4.35.64.128/25
8.5.128.0/23
13.52.6.128/25
15.220.80.0/24
15.220.81.0/25
18.254.23.128/25
18.254.61.0/25
20.203.158.80/28
20.203.190.192/26
50.239.202.0/23
50.239.204.0/24
52.61.100.128/25
52.202.62.192/26
64.125.62.0/24
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
69.174.108.0/22
99.79.20.0/25
101.36.167.0/24
101.36.170.0/23
103.122.166.0/23
111.33.115.0/25
111.33.181.0/25
115.110.154.192/26
115.114.56.192/26
115.114.115.0/26
115.114.131.0/26
120.29.148.0/24
121.244.146.0/27
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
160.1.56.128/25
161.199.136.0/22
162.12.232.0/22
162.255.36.0/22
165.254.88.0/23
166.108.64.0/18
170.114.0.0/16
173.231.80.0/20
192.204.12.0/22
198.251.128.0/17
202.177.207.128/27
203.200.219.128/27
204.80.104.0/21
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
213.244.140.0/24
221.122.63.0/24
221.122.64.0/24
221.122.88.64/27
221.122.88.128/25
221.122.89.128/25
221.123.139.192/27


IPv6:
2407:30C0::/32
2600:9000:2600::/48
2620:123:2000::/40

UDP

3478, 3479, 8801 - 8810

All Zoom clients

IPv4:

3.7.35.0/25
3.21.137.128/25
3.25.41.128/25
3.80.20.128/25
3.104.34.128/25
3.120.121.0/25
3.127.194.128/25
3.208.72.0/25
3.235.71.128/25
3.235.72.128/25
3.235.73.0/25
3.235.82.0/23
3.235.96.0/23
4.34.125.128/25
4.35.64.128/25
8.5.128.0/23
13.52.6.128/25
15.220.80.0/24
15.220.81.0/25
18.254.23.128/25
18.254.61.0/25
20.203.158.80/28
20.203.190.192/26
50.239.202.0/23
50.239.204.0/24
52.61.100.128/25
52.202.62.192/26
64.125.62.0/24
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
69.174.108.0/22
99.79.20.0/25
101.36.167.0/24
101.36.170.0/23
103.122.166.0/23
111.33.115.0/25
111.33.181.0/25
115.110.154.192/26
115.114.56.192/26
115.114.115.0/26
115.114.131.0/26
120.29.148.0/24
121.244.146.0/27
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
160.1.56.128/25
161.199.136.0/22
162.12.232.0/22
162.255.36.0/22
165.254.88.0/23
166.108.64.0/18
170.114.0.0/16
173.231.80.0/20
192.204.12.0/22
198.251.128.0/17
202.177.207.128/27
203.200.219.128/27
204.80.104.0/21
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
213.244.140.0/24
221.122.63.0/24
221.122.64.0/24
221.122.88.64/27
221.122.88.128/25
221.122.89.128/25
221.123.139.192/27


IPv6:
2407:30C0::/32
2600:9000:2600::/48
2620:123:2000::/40

Firewall rules for Zoom Phone

Note :

ProtocolPortsSourceDestination
TCP5091All Zoom clients

3.72.154.128/25
3.80.20.128/25
3.104.34.128/25
3.120.121.0/25
3.235.96.0/23
8.5.128.0/24
18.159.143.0/25
52.59.151.0/25
64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
99.79.20.0/25
101.36.167.0/24
103.122.166.0/23
120.29.148.0/24
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
162.12.232.0/22
170.114.0.0/16
173.231.92.0/24
173.231.94.0/24
192.204.12.0/22
206.247.0.0/16
209.9.211.0/24
209.9.215.0/24
213.19.144.0/24
213.19.153.0/24
213.244.140.0/24
221.122.63.0/24


IPv6:
2620:123:2000::/40

TCP390 (see note )All Zoom clients

3.21.137.128/25
3.235.96.0/23
134.224.0.0/16
170.114.0.0/16

UDP20000-64000All Zoom Clients

64.211.144.0/24
64.224.32.0/19
65.39.152.0/24
69.174.57.0/24
101.36.167.0/24
103.122.166.0/23
115.117.119.96/27
121.244.146.0/27
121.244.203.192/27
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
162.12.232.0/22
170.114.0.0/16
173.231.92.0/24
173.231.94.0/24
203.200.219.128/27
206.247.0.0/16
207.226.132.0/24
209.9.211.0/24
213.19.144.0/24
213.244.140.0/24
221.122.63.0/24


IPv6:
2620:123:2000::/40

Firewall rules for Zoom Contact Center

ProtocolPortsSourceDestination
UDP20000-64000All Zoom Clients

50.239.204.0/24
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
170.114.0.0/16
204.80.104.0/21
206.247.0.0/16

IPv6:
2620:123:2000::/40

TCP443All Zoom Clients,
User's web browser

3.21.137.128/25
3.235.96.0/23
50.239.204.0/24
103.122.166.0/23
134.224.0.0/16
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
170.114.0.0/16
204.141.28.0/22
206.247.0.0/16
207.226.132.0/24

TCP5091All Zoom Clients

50.239.204.0/24
144.195.0.0/16
147.124.96.0/19
149.137.0.0/17
156.45.0.0/17
159.124.0.0/16
170.114.0.0/16
204.80.104.0/21
206.247.0.0/16

IPv6:
2620:123:2000::/40

TCP4433.18.202.127
3.20.188.102
3.235.96.0/23 
3.66.90.39
3.66.90.206
3.70.50.178
3.141.189.66
3.237.150.230
44.212.128.71
44.198.173.62
134.224.0.0/16
170.114.0.0/16

Specified endpoint from Network requests defined in Zoom Contact Center Flow Script widget and HTTP Call Widget

Firewall rules for Zoom website

ProtocolPortsSourceDestination
TCP80, 443All Zoom Clients
User's web browser
*.zoom.us

Firewall rules for Zoom Support and Community

ProtocolPortsSourceDestination
TCP80, 443User's web browser*.zoom.us
*.zoom.com

Firewall rules for Zoom Apps created by Zoom

ProtocolPortsSourceDestination
TCP443All Zoom Clients
User's web browser
*.zoomapp.cloud

Firewall rules for certificate validation

The Zoom client 5.5.0 or later requires allowing the following URLs for certificate validation.

ProtocolPortsSource

Destination

HTTP80Zoom clientcrl3.digicert.com
crl4.digicert.com
ocsp.digicert.com
crl.entrust.net
certificates.godaddy.com
crl.godaddy.com
ocsp.godaddy.com
certificates.starfieldtech.com
crl.starfieldtech.com
ocsp.starfieldtech.com
ocsp.sectigo.com
ocsp.usertrust.com 
ocsp.comodoca.com
crl.sectigo.com
crl.usertrust.com
crl.comodoca.com

Zoom CDN

The Zoom CDN is used to optimize the delivery of files related to the Zoom platform such as customer meeting recordings, static web assets, Zoom clients, and Zoom Phone firmware downloads. 

ProtocolPortsSource

Destination

HTTPS443

User's web browser
Zoom Certified Hardware (Zoom Room hardware, Zoom Phone hardware, etc.)

IPv4:
52.84.151.0/24
170.114.45.0/24
170.114.46.0/24

 

IPv6:
2407:30c0:180::/48
2407:30c0:181::/48
2600:9000:2600::/48

Zoom Device Management (ZDM)

Zoom Device Management(ZDM) is a device management tool, that allows you to manage your Zoom Rooms, devices, and  Zoom Clients  without having to physically engage with each device. If your company network includes firewall or proxy servers, you will need to add this ZDM url to your allowed list of network domains to allow communication with the ZDM server:

https://zdmapi.zoom.us

IP ranges txt files

IP ranges to be allowed can also be downloaded in txt file format:

Proxy server

We support https/SSL proxy server via port 443 for Zoom traffic.

Note : This does not apply to the Zoom Phone service. 

Zoom automatically detects your proxy settings. In some instances, you may be prompted to enter the proxy username/password.

Note : We recommend allowing  zoom.us  and  *.zoom.us  from proxy or SSL inspection. 

Firewall rules for other Zoom services