---
title: "Firewall Requirements for Direct Media Delivery"
slug: "firewall-requirements-for-direct-media-delivery"
updated: 2026-08-27T14:57:49Z
published: 2026-08-27T14:57:49Z
canonical: "support.bcmone.com/firewall-requirements-for-direct-media-delivery"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.bcmone.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Firewall Requirements for Direct Media Delivery

Two specific policies **must be put in place** on your network's firewall to ensure you receive all audio on Flowroute calls.

#### SIP Signaling (Call Control)

Allow UDP and TCP traffic over port 5060 from the following server IP addresses:

> [!NOTE]
> **NOTE:** If your system has issues connecting over port **5060**, you can use **5160** as an alternate SIP port.

| Point of Presence (PoP) | SIP Proxy | IP Range |
| --- | --- | --- |
| **United States** |
| US-West-OR | us-west-or.sip.flowroute.com | 34.210.91.112/28 |
| US-East-VA | us-east-va.sip.flowroute.com | 34.226.36.32/28 |

#### RTP Media (Call Audio)

To reduce latency, Flowroute uses [Direct Media Delivery.](/flowroute-support/docs/what-is-direct-media-delivery) To receive Direct Media, allow UDP packets from **any source IP address** with a destination port within your system's RTP public media port range.

> [!NOTE]
> **NOTE**: RTP media port range varies by phone system.

## Related

- [What is Direct Media Delivery?](/what-is-direct-media-delivery.md)
- [Quality of Service (QoS) Strategies for Flowroute's Direct Audio](/quality-of-service-qos-strategies-for-flowroutes-direct-audio.md)