External to internal Internal to internal The internal perimeter network it significantly more restrictive than the external perimeter as it is the last line of defense against attack. Revert to your Design: The following information provided is for illustration only. Please consult your Low Level Design for correct values that are applicable The following table displays the firewall rules required for each Skype for Business Edge Server Internal Firewall Rules (Reverse Proxy) Service Source IP Source Protocol Destination Destination Destination Port IP Port Protocol Logging Front End Any TCP Edge TCP Server IP Internal IP 50003 XMPP Front End Any TCP Edge 23456 TCP Server IP Internal IP SIP Front End Any TCP Edge 5061 TCP Server IP Internal IP SIP Edge Any TCP Front End 5061 TCP Internal IP Server IP SIP Front End Any TCP Edge 5062 TCP Server IP Internal IP Media Any Internal Any UDP Edge 3478 UDP IP Internal IP Media Any Internal Any TCP Edge 443 TCP IP Internal IP Replication Front End Any TCP Edge 4443 TCP Server IP Internal IP RDP Any TCP & Edge 3389 TCP&UDP Network UDP Internal IP IP CRL Edge Any TCP CRL Web 80 TCP Internal IP Distribution Point CA Edge Any TCP Certificate 443 TCP Internal IP Web Enrollment Service IP
External to internal Internal to internal The internal perimeter network it significantly more restrictive than the external perimeter as it is the last line of defense against attack. Revert to your Design: The following information provided is for illustration only. Please consult your Low Level Design for correct values that are applicable The following table displays the firewall rules required for each Skype for Business Edge Server Internal Firewall Rules (Reverse Proxy) Service Source IP Source Port Protocol Destination IP Destination Port Destination Protocol Logging Front End Server IP Any TCP Edge Internal IP TCP XMPP Front End Server IP Any TCP Edge Internal IP 23456 TCP SIP Front End Server IP Any TCP Edge Internal IP 5061 TCP SIP Edge Internal IP Any TCP Front End Server IP 5061 TCP SIP Front End Server IP Any TCP Edge Internal IP 5062 TCP Media Any Internal IP Any UDP Edge Internal IP 3478 UDP Media Any Internal IP Any TCP Edge Internal IP 443 TCP Replication Front End Server IP Any TCP Edge Internal IP 4443 TCP RDP Network IP Any TCP & UDP Edge Internal IP 3389 TCP&UDP CRL Edge Internal IP Any TCP CRL Web Distribution Point 80 TCP CA Edge Internal IP Any TCP Certificate Web Enrollment Service IP 443 TCP 50003
Preparing%20for%20Skype%20for%20Business%20-%20Feb%202016.docx