How to Resolve Firewall Issues to Get SmartCloud Connect Running

Office 365

Some network environments are locked down via a Firewall and allow connecting only to whitelisted IP addresses from within their corporate networks.

The table below lists SmartCloud Connect resources IPs which must be whitelisted in your local firewall settings for inbound/outbound connection.

Important

All listed IPs are guaranteed to be secure, according to our privacy and security policies; transferred data is encrypted with TLS 1.3.

 

Firewall exceptions for SmartCloud Connect post-March 2, 2020

In the latest update, SmartCloud Connect servers IP addresses were changed.

 

Why were they changed?

  • SCC server-side performance boosting (with up-to-date server equipment)
  • Possible server-side disaster recovery scenarios improvement, by reducing users impact and functions recovery time (using the extra backup servers)
  • Some of the reserved addresses are in resting state, they will be used in case of main servers downing, ensuring minimum users impact; they will be left unchanged in case of future server-side migrations

 

Note: the list also includes backup servers ensuring extra stability.

Source Destination Port / Protocol Details
End users’ devices [outgoing connections]
13.86.99.8/30
52.154.56.160/28
52.167.85.92/30
52.167.85.112/28
23.101.119.163
23.99.204.128
23.99.211.242
23.99.205.25
23.99.212.42
23.99.210.227
23.99.202.156
23.99.204.198
137.116.78.243
40.79.72.21
104.46.111.101
104.46.106.216
40.79.79.249
40.123.42.131
104.46.107.64
104.210.0.177
23.101.119.44
23.99.215.110
23.99.213.182
168.61.218.60
23.99.208.251
23.99.211.22
23.99.209.158
23.99.214.44
40.70.147.2
13.68.19.178
13.68.114.184
137.116.69.208
13.68.18.80
13.68.114.115
13.68.114.136
40.70.63.81
443 / HTTPS SmartCloud Connect Synchronization connections (MS Azure infrastructure)
[incoming connections]
13.86.99.8/30
52.154.56.160/28
52.167.85.92/30
52.167.85.112/28
23.101.119.163
23.99.204.128
23.99.211.242
23.99.205.25
23.99.212.42
23.99.210.227
23.99.202.156
23.99.204.198
137.116.78.243
40.79.72.21
104.46.111.101
104.46.106.216
40.79.79.249
40.123.42.131
104.46.107.64
104.210.0.177
23.101.119.44
23.99.215.110
23.99.213.182
168.61.218.60
23.99.208.251
23.99.211.22
23.99.209.158
23.99.214.44
40.70.147.2
13.68.19.178
13.68.114.184
137.116.69.208
13.68.18.80
13.68.114.115
13.68.114.136
40.70.63.81
Users’ Exchange server
Users’ Salesforce Org configuration
443 / HTTPS SmartCloud Connect connections required for emails and calendar items syncing
End users’ devices sfpfeastus01.smartcloudconnect.io

sfdclivemailapp-invisiblecrm.azurewebsites.net
sfdc-live-desktop-invisible.azurewebsites.net
*.invisible.io
*.invisiblesolutions.com
smart.sf.invisiblesolutions.com
443 / HTTPS Required Invisible.io resources
End users’ devices maxcdn.bootstrapcdn.com
appsforoffice.microsoft.com
fonts.googleapis.com
code.jquery.com
fastcdn.org
cdnjs.cloudflare.com
cdn.jsdelivr.net
ajax.googleapis.com
az416426.vo.msecnd.net
cdn.mxpnl.com
443 / HTTPS Auxiliary CDN, API, and other resources used by SCC Add-In
End users’ devices *.salesforce.com
dc.services.visualstudio.com
static2.sharepointonline.com
ajaxhttpheaders.appspot.com
logo.clearbit.com
autocomplete.clearbit.com
api.genderize.io
api.ipify.org
tag.getdrip.com
static.userguiding.com
api.userguiding.com
ust.userguiding.com
443 / HTTPS If you have issues with opening SmartCloud Connect Sidebar, Sync management dashboard, Customization page, or SCC Admin panel, also add these resources to the whitelist of your firewall (or proxy server)
These are required Salesforce, Microsoft, wizards rendering, and other relevant resources

 

In addition, in some Orgs Salesforce logging in and data access are restricted by a pre-set IP addresses range. If you cannot log in to Salesforce via SmartCloud Connect, make sure that the above listed IP addresses are included in Login / Trusted IP ranges of your Salesforce account or Org. Please find more info on how to manage them in this official Salesforce blog or official documentation regarding Login IP ranges and Trusted IP ranges.