Horizon with Webex utilises separate SBCs and API gateways. The Webex client apps also require access to Cisco Webex services as detailed below.
Gamma Services: #
| IP Address Range | Protocols and Ports | Function |
|---|---|---|
| 151.2.128.0/19 | TCP 443 | HTTPS APIs |
| 151.2.128.0/19 138.248.17.0/24 138.248.19.128/25 | TCP 5082, UDP 10000 – 60000 | SIPS signalling, SRTP media |
If DNS based filtering is used, then access to the below domains should be allowed:
| Domain | Function |
|---|---|
| *. pub.uhorizon.cloud | Gamma cloud services |
SBC Discovery: #
DNS SRV records are used to provide high-availability service for Webex client applications. DNS SRV records resolve to two or more DNS A-records, which in turn resolve to IP addresses of Horizon Access SBCs.
In the domain names below each X refers to any digit.
| Domain Name | Record Type | Service Name | Protocol | Port |
|---|---|---|---|---|
| wasXXhjXX.pub.uhorizon.cloud Example: _sips._tcp.was03hj01.pub.uhorizon.cloud | SRV | sips | UDP | 5082 |
| wasXXjhXX.pub.uhorizon.cloud Example: _sips._tcp.was03jh01.pub.uhorizon.cloud | SRV | sips | UDP | 5082 |
| wasXXptXX.pub.uhorizon.cloud Example: _sips._tcp.was04pt01.pub.uhorizon.cloud | SRV | sips | UDP | 5082 |
| wasXXtpXX.pub.uhorizon.cloud Example: _sips._tcp.was04tp01.pub.uhorizon.cloud | SRV | sips | UDP | 5082 |
Webex Services: #
| Destination | Protocols and Ports | Function |
|---|---|---|
| See “Webex Service Domains” below | TCP 443 | HTTPS signalling and APIs |
| See “Webex Media Services” below | UDP 5004 & 9000 | SRTP media |
| Any | UDP 123 | NTP, not required if NTP available within customer network |
| Any | UDP 53 TCP 53 | DNS, not required if DNS available within customer network |
Webex Service Domains: #
| Domain / URL | Function |
|---|---|
| *.webex.com *.cisco.com *.wbx2.com *.ciscospark.com *.webexapis.com | Webex micro-services |
| *.webexcontent.com | Webex user content storage |
| *.accompany.com | People Insights Integration |
| *.sparkpostmail1.com *.sparkpostmail.com | E-mail service |
| *.giphy.com | GIF image sharing |
| safebrowsing.googleapis.com | URL safety checking |
| msftncsi.com/ncsi.txt captive.apple.com/hotspot-detect.html | Internet connectivity checking |
| *.appdynamics.com *.eum-appdynamics.com | Performance tracking |
| *.amplitude.com | Testing metrics |
| *.slido.com *.sli.do *.data.logentries.com slido-assets-production.s3.eu-west-1.amazonaws.com | Slido add-in |
| *.quovadisglobal.com *.digicert.com *.godaddy.com *.identrust.com *.lencr.org *.intel.com | Certificate revocation lists |
| *.google.com *.googleapis.com | Notifications to mobile apps |
| cdnjs.cloudflare.com cdn.jsdelivr.net static2.sharepointonline.com appsforoffice.microsoft.com | Webex Scheduler for Microsoft Outlook |
Webex Media Services: #
| IP Address Range | Function |
|---|---|
| 66.114.160.0/20 66.163.32.0/19 69.26.160.0/19 114.29.192.0/19 144.196.0.0/16 150.253.128.0/17 163.129.0.0/16 170.72.0.0/16 170.133.128.0/18 173.39.224.0/19 23.89.0.0/16 173.243.0.0/20 207.182.160.0/19 44.234.52.192/26 209.197.192.0/19 210.4.192.0/20 62.109.192.0/18 216.151.128.0/19 64.68.96.0/19 | Webex meetings media |
Update 14/10/25: Article layout improved