Internal Client Firewall Rules (Reverse Proxy) Service Source IP Source Port Protocol Destination Destination Destination IP Port Protocol SIP All Client Any TCP Front End 443 TCP Network Server IP IPs Media All Client Any TCP Edge Server 443 TCP Network Internal IP IPs Media All Client Any UDP Edge Server 3478 UDP Network Internal IPs Server IP SIP All Client Any TCP Front End 5061 TCP Network Server IP IPs File All Client Any TCP All Client 6891 - TCP Transfer Network Network 6901 IPs IPs P2P Media All Client Any TCP&UDP All Client 1024 - TCP&UDP Network Network IPs IPs Server to Server Communication Securing client traffic is only half of the task. Traffic should also be secured between Skype for Business inside servers including; Front End, Mediation, Persistent Chat servers and Survivable Branch Appliances etc. This undertaking is a huge task to complete and the full details of which should be listed in your Low Level Design. The following tables display the required firewall rules needed per server and role: All Servers All Skype for Business Servers Internal Rules Service Source IP Source Port Protocol Destination Destination Destination IP Port Protocol SQL All Skype Any UDP All Skype 1434 UDP Servers Servers Front End Servers
Internal Client Firewall Rules (Reverse Proxy) Service Source IP Source Port Protocol Destination IP Destination Port Destination Protocol SIP All Client Network IPs Any TCP Front End Server IP 443 TCP Media All Client Network IPs Any TCP Edge Server Internal IP 443 TCP Media All Client Network IPs Any UDP Edge Server Internal Server IP 3478 UDP SIP All Client Network IPs Any TCP Front End Server IP 5061 TCP File Transfer All Client Network IPs Any TCP All Client Network IPs 6891 - 6901 TCP P2P Media All Client Network IPs Any TCP&UDP All Client Network IPs 1024 - TCP&UDP Server to Server Communication Securing client traffic is only half of the task. Traffic should also be secured between Skype for Business inside servers including; Front End, Mediation, Persistent Chat servers and Survivable Branch Appliances etc. This undertaking is a huge task to complete and the full details of which should be listed in your Low Level Design. The following tables display the required firewall rules needed per server and role: All Servers All Skype for Business Servers Internal Rules Service Source IP Source Port Protocol Destination IP Destination Port Destination Protocol SQL All Skype Servers Any UDP All Skype Servers 1434 UDP Front End Servers