# Twilio - How do others resolve security issues?

**URL:** <https://forum.inductiveautomation.com/t/twilio-how-do-others-resolve-security-issues/16556>\
**Category:** Ignition\
**Created:** [January 11, 2018, 12:08am UTC](https://forum.inductiveautomation.com/t/twilio-how-do-others-resolve-security-issues/16556 "2018-01-11T00:08:43Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [January 11, 2018, 12:08am UTC](https://forum.inductiveautomation.com/t/twilio-how-do-others-resolve-security-issues/16556/1 "2018-01-11T00:08:43Z")

</div>

I’m very keen to use Twilio for our SMS paging solution for our projects, however a couple customer IT departments that we’ve tried to trial this solution with haven’t been able to come up with a secure solution.

I’m no expert on network security, however the issue seems to be that in order to allow inbound SMS acknowledgements, traffic must be allowed in from any source, since Twilio’s inbound traffic doesn’t come from specific IP addresses…

How have others gotten around security issues?

---

<div class="post-metadata">

**Author:** ![Kyle\_Chase](https://avatars.discourse-cdn.com/v4/letter/k/9de0a6/32.png) [@Kyle\_Chase](https://forum.inductiveautomation.com/u/Kyle_Chase)\
**Post date:** [January 11, 2018, 4:38am UTC](https://forum.inductiveautomation.com/t/twilio-how-do-others-resolve-security-issues/16556/2 "2018-01-11T04:38:36Z")

</div>

With the Kymera twilio module, it is possible to set a different port for the Twilio servlet vs the Ignition servlet.

Forcing HTTPS is next.

Third, Twilio has a page describing how you can validate the message comes from Twilio  
[https://www.twilio.com/docs/api/security](https://www.twilio.com/docs/api/security)

And finally, I would put a Layer 7 filter in from of that servlet, which can limit messages to [https://blahblah/twiliouri](https://blahblah/twiliouri)

---

<div class="post-metadata">

**Author:** ![diat150](https://avatars.discourse-cdn.com/v4/letter/d/a587f6/32.png) [@diat150](https://forum.inductiveautomation.com/u/diat150)\
**Post date:** [January 11, 2018, 9:00pm UTC](https://forum.inductiveautomation.com/t/twilio-how-do-others-resolve-security-issues/16556/3 "2018-01-11T21:00:21Z")

</div>

Hello Kyle,

Is your module a direct replacement for the Ignition Voice module? Ive had weird intermittent issues between the Ignition voice module and various providers. So I kind of round robin between providers.

If I swap from the Ignition voice module to your twilio module will I need to do any changes or scripting on my end? Twilio has been solid for me on sms, so I wouldnt mind giving them a shot.

---

<div class="post-metadata">

**Author:** ![Kyle\_Chase](https://avatars.discourse-cdn.com/v4/letter/k/9de0a6/32.png) [@Kyle\_Chase](https://forum.inductiveautomation.com/u/Kyle_Chase)\
**Post date:** [January 17, 2018, 4:13pm UTC](https://forum.inductiveautomation.com/t/twilio-how-do-others-resolve-security-issues/16556/4 "2018-01-17T16:13:04Z")

</div>

It is not a direct replacement. We handle acknowledgements differently. Mainly, each user has a pin, not each alarm has a pin. When a user enters their pin, it acks all alarms that have been sent to them.

No changes should have be made to your scripts, but feel free to give it a try, and contact our support if you need a hand.