topic App-ID Policy to Explicitly Block - Allow WiFi Calling in General Topics

App-ID Policy to Explicitly Block - Allow WiFi Calling

REganEVO — Fri, 07 Sep 2018 18:38:32 GMT

Hello,

I tried searching but was surprised to find no ready answers for this.. I'm trying to determine the App-ID policy to explicitly block or allow voice calling over wifi (or wifi calling) on Verizon, AT&T, etc. I can't seem to find this in App-ID's database.

Any advice?

Thanks!

Re: App-ID Policy to Explicitly Block - Allow WiFi Calling

BPry — Fri, 07 Sep 2018 19:20:25 GMT

@REganEVO,

This is largely to do with the fact that there really isn't any standard answer for this across all phones/carriers. This is something that is part of the network provisioning process you may have seen if you swapped a sim card between different carrier devices. Assuming 80/443 access these are the following.

VERIZON:

Primarily uses udp/500 and udp/4500.

Largely utilizes 141.207.0.0/16 if looking to limit to IP ranges.

AT&T:

udp/500, udp/4500, tcp/143.

epdg.epc.att.net
sentitlement2.mobile.att.net
vvm.mobile.att.net

T-Mobile:

500/udp, 4500/udp, 5061/udp, 443/tcp, 994/tcp, 5061/tcp

208.54.0.0/17
66.94.0.0/19

Spring:

4500/udp, 444/tcp

I think they also use 500/udp but could be wrong here.

Facetime:

3478-3497/udp, 16384-16387/udp, 16393-16402/udp, 5223/tcp.

This also allows iMessage access.

Re: App-ID Policy to Explicitly Block - Allow WiFi Calling

mgramlic — Wed, 25 Mar 2020 23:23:10 GMT

Great list! Thank you so much for sharing this.