App-ID Policy to Explicitly Block - Allow WiFi Calling

[REganEVO]

Hello,

I tried searching but was surprised to find no ready answers for this.. I'm trying to determine the App-ID policy to explicitly block or allow voice calling over wifi (or wifi calling) on Verizon, AT&T, etc. I can't seem to find this in App-ID's database.

Any advice?

Thanks!

[BPry]

@REganEVO,

This is largely to do with the fact that there really isn't any standard answer for this across all phones/carriers. This is something that is part of the network provisioning process you may have seen if you swapped a sim card between different carrier devices. Assuming 80/443 access these are the following. 

VERIZON:

Primarily uses udp/500 and udp/4500. 

Largely utilizes 141.207.0.0/16 if looking to limit to IP ranges. 

AT&T:

udp/500, udp/4500, tcp/143. 

• epdg.epc.att.net
• sentitlement2.mobile.att.net
• vvm.mobile.att.net

T-Mobile:

500/udp, 4500/udp, 5061/udp, 443/tcp, 994/tcp, 5061/tcp

• 208.54.0.0/17
• 66.94.0.0/19

Spring:

4500/udp, 444/tcp

I think they also use 500/udp but could be wrong here. 

Facetime:

3478-3497/udp, 16384-16387/udp, 16393-16402/udp, 5223/tcp. 

This also allows iMessage access. 

[mgramlic]

Great list!  Thank you so much for sharing this.