--- title: Metaswitch HPBX - Firewall Configuration Guide description: This article provides a technical overview of the configuration requirements for integrating your phone system with our Hosted PBX service. Follow the steps below to ensure proper interoperation between your system and our infrastructur --- [Skip to content](https://helpcentre.thinktel.ca/metaswitch-hpbx-firewall-configuration-guide#main-content) English Show submenu for translations ![Thinktel-logo-navy.png\]](https://helpcentre.thinktel.ca/hs-fs/hubfs/ThinkTel-Templates/Thinktel-logo-navy.png?height=35&name=Thinktel-logo-navy.png) Open main navigation Close main navigation - English Show submenu for translations - [ThinkTel.ca](https://thinktel.ca/) [ThinkTel.ca](https://thinktel.ca/) Find helpful tips & tools. - There are no suggestions because the search field is empty. 1. [ThinkTel Help Centre](https://helpcentre.thinktel.ca/?hsLang=en) 2. [Hosted PBX](https://helpcentre.thinktel.ca/hosted-pbx?hsLang=en) 3. [Service Installation](https://helpcentre.thinktel.ca/hosted-pbx?hsLang=en#service-installation) # Metaswitch HPBX - Firewall Configuration Guide ## This article provides a technical overview of the configuration requirements for integrating your phone system with our Hosted PBX service. Follow the steps below to ensure proper interoperation between your system and our infrastructur #### **1. SIP Signaling Configuration** To enable SIP signaling with our Hosted PBX service, your system must be configured to allow traffic using both **UDP** and **TCP** protocols on **ports 5100 and 5060**. Firewall rules must permit access to the following our **SIP signaling IP addresses**: - `209.197.185.4` - `69.171.129.4` - `204.244.25.164` - `204.244.8.214` Make sure both inbound and outbound traffic to these IP addresses on the specified ports is allowed. This is essential for successful SIP registration, call setup, and call management. #### **2. RTP (Media) Configuration** For audio and media transmission over RTP, your system must support **UDP**  transport on the **port range 16384 to 65535**. You must also configure your firewall to allow traffic to the following our **media IP ranges**: - `209.197.185.0/27` - `69.171.129.0/28` - `204.244.25.164` - `204.244.8.214` These IP ranges are used by **our Session Border Controllers (SBCs)** for handling media streams. It is essential to allow both inbound and outbound traffic within this port range and to these IP subnets to ensure reliable audio quality and media connectivity. #### **3. XMPP Configuration** XMPP is used by our Hosted PBX service to support real-time communication features such as **presence** and **instant messaging**. To ensure proper operation, configure your system to allow **TCP traffic on port 5222** to the following our **XMPP servers**: - `204.244.8.210` - `204.244.8.219` Make sure your firewall permits outbound connections to these IP addresses over port 5222. This is necessary for establishing and maintaining XMPP-based communication sessions. ### **4. MaX UC Desktop Configuration** If you are using **MaX UC Desktop**, it must be able to access: - **Domain**: `commpapps.metaswitch.com` - **Protocol**: HTTPS (TCP port 443) This server is essential for: - Downloading per-customer configurations - Performing application updates - Applying custom branding settings   We hope this info was a help. If you have any problems or questions, please let us know. You can open a [support ticket](https://helpcentre.thinktel.ca/contact-us?hsLang=en) or contact us at![phone-icon-blue](https://helpcentre.thinktel.ca/hs-fs/hubfs/Knowledge%20Base%20Import/phone-icon-blue-Apr-12-2024-07-11-15-6984-PM.png?width=20&height=16&name=phone-icon-blue-Apr-12-2024-07-11-15-6984-PM.png) [1-888-852-2383](tel:1-888-852-2383) for additional assistance.   - [SIP Trunking](https://helpcentre.thinktel.ca/sip-trunking?hsLang=en#main-content) - [Service Installation](https://helpcentre.thinktel.ca/sip-trunking?hsLang=en#service-installation) - [Troubleshooting](https://helpcentre.thinktel.ca/sip-trunking?hsLang=en#troubleshooting) - [Hosted PBX](https://helpcentre.thinktel.ca/hosted-pbx?hsLang=en#main-content) - [Service Installation](https://helpcentre.thinktel.ca/hosted-pbx?hsLang=en#service-installation) - [Troubleshooting](https://helpcentre.thinktel.ca/hosted-pbx?hsLang=en#troubleshooting) - [Business Internet](https://helpcentre.thinktel.ca/business-internet?hsLang=en#main-content) - [Service Installation](https://helpcentre.thinktel.ca/business-internet?hsLang=en#service-installation) - [My Portals](https://helpcentre.thinktel.ca/my-portals?hsLang=en#main-content) - [uControl](https://helpcentre.thinktel.ca/my-portals?hsLang=en#ucontrol) - [MyPhone](https://helpcentre.thinktel.ca/my-portals?hsLang=en#myphone) - [Network Status](https://helpcentre.thinktel.ca/network-status?hsLang=en) - [Contact Us](https://helpcentre.thinktel.ca/contact-us?hsLang=en) - [Setup my services](https://helpcentre.thinktel.ca/setup-my-services?hsLang=en#main-content) - [VOIP - Voice over Internet Protocol](https://helpcentre.thinktel.ca/setup-my-services?hsLang=en#voip-voice-over-internet-protocol) - [PBX - Private Branch Exchange](https://helpcentre.thinktel.ca/setup-my-services?hsLang=en#pbx-private-branch-exchange) - [Voice Services](https://helpcentre.thinktel.ca/voice-services?hsLang=en#main-content) - [Think365](https://helpcentre.thinktel.ca/voice-services?hsLang=en#think365) - [Fax](https://helpcentre.thinktel.ca/voice-services?hsLang=en#fax) - [Troubleshooting](https://helpcentre.thinktel.ca/troubleshooting?hsLang=en#main-content) - [Fax Service](https://helpcentre.thinktel.ca/troubleshooting?hsLang=en#fax-service) - [Toll Free](https://helpcentre.thinktel.ca/troubleshooting?hsLang=en#toll-free) - [Think 365](https://helpcentre.thinktel.ca/troubleshooting?hsLang=en#think-365) [![Distributel](https://helpcentre.thinktel.ca/hubfs/logo-2.svg "Distributel")](https://www.distributel.ca/?hsLang=en) © 2024 ThinkTel. All Rights Reserved Copyright © 2026, Distributel