Firewall Configuration

Overview

VSee services will attempt to navigate network architecture to the best of their ability. However, in order to guarantee the best results, please add the following port and firewall rules to your corporate firewall / router systems.

Please note that VSee is not able to provide fixed IP addresses for these servers. However, these IP addresses are relatively stationary, and any changes will be posted here at least 1 month in advance.

Network Security Diagram

VSee Security Network Diagram v3.2

The diagram predates the October 15, 2026 port update. Where they differ, the port tables below are authoritative.

Simplified Rules

If *.vsee.com can be whitelisted, please add this into your firewall rules with the following ports:

Detailed Rules (US Customers)

If *.vsee.com cannot be whitelisted, the following subdomains and ports are required.

Messenger Service

The relay ports are optional. They are used only on direct calls that go through the other participant's TURN relay. Calls work with UDP 3478 to the TURN servers and UDP 10000 to the video bridges alone.

Clinic Service

Optional Firewall Rules

Detailed Rules (International Customers)

For international customers, please apply all rules in the US Customers section as well as the following:

Proxy Servers

Many organizations utilize proxy servers with their networks. However, as VSee network traffic is already encrypted, passing this traffic through a proxy server does not make it any more secure. On the other hand, proxy servers can introduce performance problems. Proxy servers can introduce latency and packet loss, which can degrade audio and video quality where real-time streams are essential. Thus, bypassing proxies for VSee traffic is recommended as routing through all traffic through a proxy server might impact connectivity and A/V performance.

If proxy servers cannot be bypassed, VSee services can connect to the above hosts via a proxy server. We recommend the following for better performance with a proxy server:

• Proxy servers should allow persistent TCP connections.
• Proxy servers should be configured to allow UDP traffic to the VSee TURN Servers at port 3478 and the Video Bridges at port 10000 to proceed directly.

Testing VSee Connectivity

VSee provides a suite of tools to help test that firewall rules are configured appropriately. Please note that only a subset of the requirements listed above are tested by these tools. It is important to ensure that the firewall rules listed above are followed, even if these tests pass. Failing to follow the firewall configuration requirements may cause issues such as intermittent bad call quality or dropped calls.

Outbound Connections

VSee services may occasionally need to connect with your systems for webhooks and callbacks, or to securely transfer patient / encounter data through SFTP, etc. Here are the lists of IP addresses that should be whitelisted.

Updates