Important Security Advisory: IP Whitelisting Updates for VanillaSoft Calling Services
Last Updated: October 25, 2026
Overview
We want to inform VanillaSoft customers of an important network infrastructure update affecting the Stretto services used by certain calling applications.
Our technology provider, CounterPath, has announced a data center migration taking place between October 23 and October 25, 2026. As part of this migration, the IP addresses associated with certain services are changing.
Customers who use IP whitelisting, firewalls, or network access restrictions may need to update their configurations to maintain uninterrupted access to calling services.
Customers without these network restrictions generally do not need to make changes.
What's Changing?
As part of the data center migration, CounterPath is introducing a new IP address range.
| Network Configuration | IP Address Range |
|---|---|
| New IP range | 154.6.16.0/24 |
| Previous IP range | 216.93.246.0/24 |
| Migration period | October 23–25, 2026 |
| Previous IP range retirement | By October 31, 2026 |
The previous IP address range is scheduled to be decommissioned by the end of October 2026.
Important: Customers who restrict outbound network traffic should ensure the new IP range is permitted through their firewall.
Who Needs to Take Action?
You may need to update your network configuration if your organization:
- Uses IP whitelisting to control outbound network connections.
- Restricts network traffic through corporate firewalls.
- Uses security appliances that permit access only to approved IP addresses.
- Manages calling connectivity through a corporate IT or network security team.
- Has previously configured firewall rules for CounterPath, Bria, or Stretto services.
If your organization does not restrict outbound connections, no configuration changes are generally required.
If you're unsure whether these restrictions apply to your organization, we recommend sharing this article with your IT or network administrator.
What Action Is Required?
If your organization uses IP whitelisting or restrictive firewall configurations, please have your IT administrator complete the following steps.
Step 1: Review Your Existing Firewall Rules
Check whether your network currently permits outbound connections to the previous Stretto IP address range:
216.93.246.0/24
If this range is explicitly configured in your firewall or security policies, an update may be required.
Step 2: Allow the New IP Address Range
Add the following range to your approved outbound network destinations:
New IP Range: 154.6.16.0/24
Ensure that the appropriate network ports are permitted for the Stretto services your organization uses.
Step 3: Verify Required Network Ports
Depending on the services being used, the following ports may need to be accessible:
| Port | Purpose |
|---|---|
| 443 | HTTPS client provisioning |
| 18082 | User services and enhanced client diagnostics |
| 18889 | Stretto synchronization services |
| 1080 | SOCKS5 proxy for XMPP file transfers |
| 5222 | XMPP client-to-server connections |
Not all customers use every service listed above.
Your network administrator should review the requirements applicable to your organization's configuration rather than opening unnecessary ports.
Step 4: Retain Existing Access During the Transition
Do not immediately remove existing firewall permissions associated with the previous IP address range.
Maintain the necessary existing permissions until the migration is complete and your network administrator has verified connectivity.
Step 5: Verify Calling Functionality
After updating your network configuration:
- Sign in to VanillaSoft and launch your calling application.
- Confirm that your calling application connects successfully.
- Place a test outbound call.
- Verify that audio is working in both directions.
- Confirm that the application remains connected.
- Report any unexpected connectivity or calling issues to VanillaSoft Support.
What Happens If I Don't Update My Firewall?
If your organization restricts outbound traffic to specific IP addresses and does not permit the new range, certain calling-related services may experience connectivity problems.
Depending on your configuration, symptoms could include:
- Difficulty connecting to the calling application.
- Calling application provisioning or registration issues.
- Failure to establish or maintain certain service connections.
- Errors when accessing services that rely on Stretto connectivity.
These are potential symptoms rather than confirmed effects for every VanillaSoft customer.
Organizations without restrictive network configurations are less likely to experience issues related specifically to this IP address change.
Additional Network Requirements
CounterPath also identifies several domain names associated with its services.
Examples include:
| Domain | Purpose |
|---|---|
login.softphone.com |
Client provisioning |
sip.softphone.com |
SIP signaling and media for supported services |
logging.softphone.com |
User services |
hda.softphone.com |
Help Desk Assistant |
sync.bria-x.com |
Synchronization services |
uem.bria-x.com |
Call statistics |
Some CounterPath services operate on cloud-hosted infrastructure where IP addresses may change.
For these services, CounterPath recommends allowing access using fully qualified domain names (FQDNs) rather than relying exclusively on static IP addresses.
Your IT administrator should review the complete provider documentation to determine which domains and ports apply to your environment.
Frequently Asked Questions
Does this affect all VanillaSoft customers?
No. This update is primarily relevant to customers using Stretto-dependent calling services in environments with restrictive firewall or IP whitelisting configurations.
Do I need to make changes if I don't use IP whitelisting?
Generally, no. If your network allows the required outbound connections, additional configuration may not be necessary.
Will this affect my VanillaSoft account or stored data?
This announcement concerns network connectivity requirements for certain calling services. It does not indicate a change to your VanillaSoft account information or stored data.
Is this related to a security breach?
No security breach has been identified in the provider's migration notice. This is a planned infrastructure change that may require updates to network security configurations.
Can I remove the previous IP range immediately?
We recommend retaining the existing required permissions until your IT administrator confirms that the migration is complete and connectivity is working correctly.
The previous IP range is scheduled for decommissioning by October 31, 2026.
What should I do if I experience calling issues?
If you experience calling connectivity problems following the migration:
- Confirm that your firewall permits the new IP address range.
- Verify that the required ports and domains are accessible.
- Restart your calling application and attempt to reconnect.
- Contact VanillaSoft Support if the issue persists.
When contacting Support, please provide any relevant error messages, the approximate time of the issue, and whether your organization uses firewall restrictions or IP whitelisting.
Need Assistance?
Our Customer Support team is available to help you investigate calling connectivity issues.
If you are unsure whether your organization needs to update its network configuration, we recommend contacting your IT administrator first.
For additional assistance, please contact VanillaSoft Customer Support.
Was this article helpful?
Thanks for the feedback. Glad we could help!
Sorry this article didn't give you the answer you were looking for. If you'd like to let us know what was missing, unclear, or anything else that could help us improve it, please share as much or as little detail as you'd like.
In case we need to clarify anything. All feedback is reviewed, whether or not you leave your email.
We read and investigate all feedback, using it to continuously improve our knowledge base.
Thank you for your feedback. If you need further assistance, please reach out to our support team.