How to Resolve Firewall Issues to Get SmartCloud Connect Running

Office 365

Some network environments are locked down via a Firewall and allow connecting only to whitelisted IP addresses from within their corporate networks.

The table below lists SmartCloud Connect resources IPs which must be whitelisted in your local firewall settings for inbound/outbound connection.


All listed IPs are guaranteed to be secure, according to our privacy and security policies; transferred data is encrypted with TLS 1.3.


Firewall exceptions for SmartCloud Connect post-March 2, 2020

In the latest update, SmartCloud Connect servers IP addresses were changed.


Why were they changed?

  • SCC server-side performance boosting (with up-to-date server equipment)
  • Possible server-side disaster recovery scenarios improvement, by reducing users impact and functions recovery time (using the extra backup servers)
  • Some of the reserved addresses are in resting state, they will be used in case of main servers downing, ensuring minimum users impact; they will be left unchanged in case of future server-side migrations


Note: the list also includes backup servers ensuring extra stability.

Source Destination Port / Protocol Details
End users’ devices [outgoing connections]
443 / HTTPS SmartCloud Connect Synchronization connections (MS Azure infrastructure)
[incoming connections]
Users’ Exchange server
Users’ Salesforce Org configuration
443 / HTTPS SmartCloud Connect connections required for emails and calendar items syncing
End users’ devices
443 / HTTPS Required resources
End users’ devices
443 / HTTPS Auxiliary CDN, API, and other resources used by SCC Add-In
End users’ devices *
443 / HTTPS If you have issues with opening SmartCloud Connect Sidebar, Sync management dashboard, Customization page, or SCC Admin panel, also add these resources to the whitelist of your firewall (or proxy server)
These are required Salesforce, Microsoft, wizards rendering, and other relevant resources


In addition, in some Orgs Salesforce logging in and data access are restricted by a pre-set IP addresses range. If you cannot log in to Salesforce via SmartCloud Connect, make sure that the above listed IP addresses are included in Login / Trusted IP ranges of your Salesforce account or Org. Please find more info on how to manage them in this official Salesforce blog or official documentation regarding Login IP ranges and Trusted IP ranges.