Cisco Cisco Expressway
Outbound from Expressway-C (private) to Expressway-E (DMZ)
Purpose
Protocol
Expressway-C (source)
Expressway-E (listening)
XMPP (IM and Presence)
TCP
Ephemeral port
7400
SSH (HTTP/S tunnels)
TCP
Ephemeral port
2222
Traversal zone SIP signaling
TLS
25000 to 29999
7001
Traversal zone SIP media
(for small/medium systems on X8.1 or
later)
later)
UDP
36000 to 59999*
36000 (RTP), 36001
(RTCP) (defaults)
(RTCP) (defaults)
Traversal zone SIP media
(for large systems)
UDP
36000 to 59999*
36000 to 36011 (6 pairs of
RTP and RTCP ports for
multiplexed media
traversal)
RTP and RTCP ports for
multiplexed media
traversal)
Outbound from Expressway-E (DMZ) to public internet
Purpose
Protocol
Expressway-E (source)
Internet endpoint
(listening)
(listening)
SIP media
UDP
36002 to 59999 or
36012 to 59999
>= 1024
SIP signaling
TLS
25000 to 29999
>= 1024
Inbound from public internet to Expressway-E (DMZ)
Purpose
Protocol
Internet endpoint (source)
Expressway-E (listening)
XMPP (IM and Presence)
TCP
>= 1024
5222
HTTP proxy (UDS)
TCP
>= 1024
8443
Media
UDP
>= 1024
36002 to 59999 or
36012 to 59999*
SIP signaling
TLS
>= 1024
5061
HTTPS (only required for external
administrative access, which is
strongly discouraged)
administrative access, which is
strongly discouraged)
TCP
>= 1024
443
From Expressway-C to Internal Infrastructure and Endpoints
Purpose
Protocol
Expressway-C (source)
Internal Device Port/Range
XMPP (IM and Presence)
TCP
Ephemeral port
7400 (IM and Presence)
HTTP proxy (UDS)
TCP
Ephemeral port
8443 (Unified CM)
HTTP proxy (SOAP)
TCP
Ephemeral port
8443 (IM and Presence
Service)
Service)
43
Mobile and Remote Access Through Cisco Expressway Deployment Guide
Mobile and Remote Access Port Reference