To make sure that all Convo Now apps work correctly on high-security networks, please review this PDF document or share it with your IT team.
Convo Now Applications Firewall Requirements
To ensure that Convo Now applications (Mobile and Web) function properly and deliver high-quality audio and video calls, the Convo Now platform requires specific network configurations.
If these “digital doors” (ports) are not opened by IT, users may experience dropped calls, one-way audio or video, black video, or connection failures.
| Service Status | Current Recommendation |
| Standard Office/Home | Fully supported with minor IT whitelist updates. |
| Strict Environments | Issues may occur in Hotels, Hospitals, and Universities. |
Video — Twilio Region us1 (US East Coast, Virginia)
Ideally, all IP ranges below should be allowed/whitelisted to support the Twilio video media servers used by Convo Now to make video calls.
| IP Range | Protocol | Port Range | Purpose |
|---|---|---|---|
| 34.203.254.0–34.203.254.255 | UDP/SRTP/SRTCP or TLS/443 or UDP/3478 | 10,000–60,000 | Twilio video media servers — to make video calls |
| 54.172.60.0–54.172.61.255 | UDP/SRTP/SRTCP or TLS/443 or UDP/3478 | 10,000–60,000 | Twilio video media servers |
| 34.203.250.0–34.203.251.255 | UDP/SRTP/SRTCP or TLS/443 or UDP/3478 | 10,000–60,000 | Twilio video media servers |
| 3.235.111.128–3.235.111.255 | UDP/SRTP/SRTCP or TLS/443 or UDP/3478 | 10,000–60,000 | Twilio video media servers |
Reference: Twilio Video IP Addresses
Voice — Twilio Media Servers
The following IP range should be accessible to support voice calls to and from hearing users.
| IP Range | Protocol | Port Range | Purpose |
|---|---|---|---|
| 168.86.128.0/18 | UDP | 10,000–60,000 | Twilio voice media servers — to make and receive voice calls to/from hearing users |
Reference: Twilio Voice Network Connectivity Requirements
Application & Supporting Services
Convo Now also depends on the following application and supporting services. IT teams should ensure the listed hostnames, IP addresses, protocols, and ports are accessible.
| Service | Hostname / IP | Protocol | Port | Purpose |
|---|---|---|---|---|
| Convo AWS Global Accelerator | 52.223.27.77; 35.71.162.84; now.convo.io | TCP | 443 | AWS service used to improve application performance for local and global users |
| Google Fonts / reCAPTCHA | 142.250.0.0/15; fonts.googleapis.com; fonts.gstatic.com; www.google.com/recaptcha; www.gstatic.com/recaptcha | TCP | 443 | Enables reCAPTCHA and Google Fonts |
| Sentry.io | 34.120.195.249/32; *.ingest.sentry.io | TCP | 443 | Web application performance monitoring and error tracking |
| cdnjs (Cloudflare) | 104.16.0.0/13; cdnjs.cloudflare.com | TCP | 443 | Font Awesome 4.7.0 icon set for web applications |
| Akamai | 2.16.0.0/13; 2.20.80.0–2.20.95.255 | TCP | 443 | Maintains security posture and supports micro-segmentation security policy |
| CloudFront | 52.84.0.0–52.95.255.255; 54.224.0.0–54.255.255.255 | TCP | 443 | CDN service used to distribute static and dynamic web content through edge locations |
| Ziggeo | 52.0.0.0–52.79.255.255; 13.24.0.0–13.59.255.255; 13.244.0.0–13.251.255.255; *.ziggeo.com | TCP | 443 | Used to send videomail to Customer Care |
Port & Connectivity Requirements
Convo Now services require access to specific ports. These ports only accept inbound traffic after an outbound request is initiated by the corporate network/client. The connection is bidirectional, but because it is initiated internally, an external entity cannot independently initiate traffic through these ports.
At a minimum, one of the following configurations must be supported:
443 TCP only — Minimum requirement
This is the bare minimum configuration. It requires allowing non-encrypted TLS traffic through port 443. Media will be tunneled through TCP, which may result in slightly reduced media quality.
443 TCP (HTTPS) + 3478 UDP — Recommended for strict corporate firewalls
This is the general recommendation for strict corporate environments. In addition to TCP 443, opening UDP port 3478 provides a better audio and video experience.
UDP is highly recommended over TCP for real-time audio and video because it prioritizes timely media delivery.
443 TCP (HTTPS) + UDP ports 1025–65535 — Broader configuration
This configuration may be appropriate depending on how the customer’s network is deployed behind the corporate firewall and how IP addresses and ports are allocated.
It provides additional media channels and available resources for multiple clients. These ports only need to accept inbound traffic after an outbound request has been initiated. UDP ports are used for media.
We also encourage whitelisting:
*.convo.io
These three supported configurations and the outbound-initiated traffic behavior are specified in the PDF.
Test Your Connection
IT teams can use Twilio’s network test to check connectivity:
The PDF specifically identifies this test as the connectivity check for the configuration.
Updated August 21, 2026