Security Considerations
- Daniel Olivera (Unlicensed)
- Santiago CouƱago
- juan.elzaurdia
The network where agents are working, must consider the following
Port 3478 Ā UDP/TCP must be opened at least for the host stun.ucontactcloud.com
Port 8089 Ā UDP/TCP must be opened at least for the host (ucontactinstance).ucontactcloud.com
Port 443 UDP/TCP must be opened at least for the host (ucontactinstance).ucontactcloud.com
Ports 10000-20000 UDP must be opened at least for the host (ucontactinstance).ucontactcloud.com
Access to the site Ā Ā http://cacerts.geotrust.com/GeoTrustRSACA2018.crtĀ andĀ redirector.gvt1.com/Ā must be enabled in order to allow browsers to validate uContact SSL certificate.
Enable access to the activator license site: us-central1-licenciator.cloudfunctions.net/api/servers/getLicence
Enable the 10050 and 10051 TCP ports for the IP 35.184.27.240, corresponding to: monitor.ucontactcloud.com
Access to the followingĀ IPĀ“sĀ (104.197.204.63Ā Ā , 74.125.134.127) used by google chrome.
Verify that SIP - Ā ALG is not active on the local or border network devices.
Verify that IPS - detection is not active because it can cause VoIP packet discard and voice problemas (unespected call drops).
Domain *.github.com must be enable for system updates
Disable Google chrome perfromance settings: chrome://settings/ ā Performance ā. (Memory Saver toggle switched off, and Always keep sites added with https://(ucontactinstance).ucontactcloud.com)
Based on this considerations, the policy of the antivirus used on the workstations they must be actuated in order to avoid port scan, blocking or denying the access by security reasons.