Vanillasoft IP Whitelisting and Network Requirements

Last updated: October 25, 2026

If users have trouble accessing VanillaSoft, signing into VS Connect, sending or receiving emails, or using our HubSpot integration, your network may be blocking required IP addresses, domains, or ports.

Adding the appropriate destinations to your organization's allow list (whitelist) can help resolve these connectivity issues.

Tip: Share this article with your IT or network administrator. Changes to firewalls, routers, and security tools must be completed by your organization.

Important Network Update — October 2026

Action may be required for customers using IP whitelisting or restrictive firewalls.

Our calling technology provider, CounterPath, is migrating its Stretto data center between October 23 and October 25, 2026.

As part of this migration, the following IP address changes apply:

What you need to do

If your organization restricts outbound connections using IP whitelisting or firewall rules:

1. Add 154.6.16.0/24 to your approved outbound destinations.
2. Maintain existing required access during the migration.
3. Verify that the appropriate ports and domains are accessible.
4. Test your VS Connect calling functionality.
5. Review the previous IP range for removal after the migration is confirmed complete.

Customers without restrictive firewall configurations generally do not need to make changes.

Important: Do not remove the previous IP range until the migration is complete and your IT administrator has confirmed connectivity.

Vanillasoft VoIP (VS Connect)

To support reliable calling with Vanillasoft VoIP (VS Connect), your network must permit the appropriate signaling, media, provisioning, and supporting service connections.

Share these requirements with your IT or network administrator.

Required VS Connect Ports

Allow outbound connections and the associated return traffic using the applicable protocols.

These are the previously published VS Connect requirements. The specific ports needed depend on your calling configuration.

Additional Stretto Network Requirements

CounterPath identifies the following ports for Stretto services.

These are provider-level requirements. Your IT administrator should enable only the services applicable to your organization's configuration.

Note: Not all Vanillasoft customers use every Stretto service listed above. Your network administrator should confirm which services apply before opening additional ports.

Additional CounterPath Service Domains

The following domains are identified in CounterPath's network documentation.

These are provider service domains and may not all apply to your Vanillasoft calling configuration.

Important: Some CounterPath services operate on cloud infrastructure with changing IP addresses. Where supported by your network security policies, allowing the required fully qualified domain names (FQDNs) is preferable to maintaining static IP addresses for those services.

Recommended Network Configuration

For the best calling experience:

• Use a wired Ethernet connection where possible. Wi-Fi can introduce jitter, packet loss, and inconsistent call quality.
• Separate voice and data traffic. Where supported, use a dedicated voice VLAN and configure Quality of Service (QoS) to prioritize calling traffic.
• Maintain stable bandwidth. Ensure sufficient upstream and downstream capacity with low latency and minimal packet loss.
• Review firewall restrictions. Confirm that required outbound connections and return traffic are permitted.

Unsupported Network Devices

The following configurations are not supported for Vanillasoft VoIP:

• Load balancers routing VoIP traffic concurrently across multiple WAN connections.
• WAN accelerators or WAN acceleration.

Device Configuration Recommendations

Where applicable, disable the following features on routers, firewalls, or switches when they interfere with VoIP traffic:

• SIP ALG (Application Layer Gateway)
• Deep Packet Inspection (DPI) applied to VoIP
• Stateful Packet Inspection (SPI) rules that modify SIP/RTP traffic
• SIP Transformation or SIP Helpers
• Power-saving Green Ethernet features

Your IT administrator should evaluate these settings before making changes.

Alternate Configuration — Dedicated Voice Network

Organizations that prefer not to modify their primary firewall may consider routing Vanillasoft VoIP traffic through a dedicated router or voice network.

A typical configuration includes:

1. The primary internet modem/router continues serving the organization's data network.
2. A separate router manages the voice network.
3. Calling devices or applications connect through the dedicated voice network.
4. The voice router permits the required ports, domains, and IP ranges.

This approach can simplify network management and help isolate voice traffic.

Need help?

Your IT or network provider can implement these changes.

If calling issues persist after the network configuration has been reviewed, contact VanillaSoft Support with the date, time, and examples of affected calls.

Google Netblocks (Maintained by Google) 

Some Vanillasoft services rely on Google infrastructure, including APIs, email transport, and cloud services.

Because Google updates its IP ranges regularly, we recommend referencing Google's published lists rather than relying exclusively on static entries.

Google IP Range References

• goog.json — Google-wide infrastructure and services
• cloud.json — Google Cloud infrastructure

How to Use These Lists

• Where supported, configure your firewall to reference the published JSON feeds automatically.
• Avoid duplicate entries where Google ranges are already included in your existing allowlist.
• If your security policy requires static IP entries, periodically review the published ranges.
• Review both IPv4 and IPv6 requirements based on your network configuration.

Note: The JSON files contain both IPv4 and IPv6 prefixes. Only permit the destinations required for your environment.

Frequently Asked Questions

Do all VanillaSoft customers need to update their firewall?

No. The October 2026 Stretto IP change primarily affects customers who use restrictive firewall rules or IP-based allowlisting for the relevant calling services.

What IP address do I need to add?

The new Stretto IP range is:

154.6.16.0/24

Your IT administrator should permit outbound access to this range if your organization restricts the applicable connections.

What happens if we don't update our firewall?

Organizations using restrictive IP allowlists may experience connectivity problems with affected calling services.

Possible symptoms include difficulty connecting, provisioning issues, or interruptions to supporting services.

Should we remove the previous IP range?

Not immediately.

CounterPath has scheduled 216.93.246.0/24 for decommissioning by October 31, 2026.

Your IT administrator should retain required access during the transition and remove obsolete entries only after confirming the migration is complete.

Do we need to open every port listed in this article?

No.

The requirements depend on your organization's calling configuration and the services being used.

Your IT administrator should permit only the necessary traffic.

Does this change affect VanillaSoft account data?

The Stretto migration is a network infrastructure change. It does not, by itself, indicate changes to your VanillaSoft account information or stored data.

What should we do if calling stops working?

1. Verify that 154.6.16.0/24 is allowed where required.
2. Confirm the applicable ports and domains are accessible.
3. Restart VS Connect and test calling functionality.
4. Contact VanillaSoft Support if the issue continues.

Need Additional Assistance?

IP whitelisting and firewall configurations are managed by your organization's IT or network administrator.

VanillaSoft Support cannot directly modify your organization's firewall, antivirus software, routers, or local network settings.

However, our Support team can assist with troubleshooting VanillaSoft connectivity issues after your IT team has reviewed the applicable network requirements.

When contacting Support, please provide:

• A description of the issue.
• Any error messages received.
• The approximate date and time of the issue.
• Examples of affected calls, if applicable.
• Confirmation of whether your organization uses IP whitelisting or restrictive firewall rules.

Last reviewed: October 25, 2026

October 2026 update: Added the new Stretto IP range, documented the previous range's scheduled retirement, and expanded the VS Connect network requirements.

Network requirements may change as service providers update their infrastructure. Customers should periodically review their firewall configurations and consult their IT administrators when connectivity issues occur.