How to Resolve Firewall Issues to Get SmartCloud Connect Running

Office 365

Some network environments are locked down via a Firewall and allow connecting only to whitelisted IP addresses from within their corporate networks.

The table below lists SmartCloud Connect resources IPs which must be whitelisted in your local firewall settings for inbound/outbound connection.

Important

All listed IPs are guaranteed to be secure, according to our privacy and security policies; transferred data is encrypted with TLS/SSL.

Source Destination Port / Protocol Details
End users’ devices [outgoing connections]
13.82.168.226
13.82.172.198
13.82.169.88
13.82.172.14
13.82.175.96
40.121.49.115
104.44.128.13
104.44.128.14
104.44.128.15
104.44.128.16
104.44.128.17
443 / HTTPS SmartCloud Connect Synchronization connections (MS Azure infrastructure)
[incoming connections]
13.82.168.226
13.82.172.198
13.82.169.88
13.82.172.14
13.82.175.96
40.121.49.115
104.44.128.13
104.44.128.14
104.44.128.15
104.44.128.16
104.44.128.17
Users’ Exchange server
Users’ Salesforce account
443 / HTTPS SmartCloud Connect connections required for emails and calendar items syncing
End users’ devices sfdclivemailapp-invisiblecrm.azurewebsites.net
sfdc-live-desktop-invisible.azurewebsites.net
*.invisible.io
*.invisiblesolutions.com
smart.sf.invisiblesolutions.com
443 / HTTPS Required Invisible.io resources
End users’ devices maxcdn.bootstrapcdn.com
appsforoffice.microsoft.com
fonts.googleapis.com
code.jquery.com
fastcdn.org
cdnjs.cloudflare.com
cdn.jsdelivr.net
ajax.googleapis.com
az416426.vo.msecnd.net
cdn.mxpnl.com
443 / HTTPS Auxiliary CDN, API, and other resources used by SCC Add-In
End users’ devices *.salesforce.com
dc.services.visualstudio.com
static2.sharepointonline.com
ajaxhttpheaders.appspot.com
logo.clearbit.com
autocomplete.clearbit.com
api.genderize.io
api.ipify.org
tag.getdrip.com
static.userguiding.com
api.userguiding.com
ust.userguiding.com
443 / HTTPS If you face issues with opening SmartCloud Connect Sidebar, Sync management dashboard, Customization page, or SCC Admin panel, also add these resources to the whitelist of your firewall (or proxy server)
These are required Salesforce, Microsoft, wizards rendering, and other relevant resources

 

In addition, in some Orgs Salesforce logging in and data access are restricted by a set IP addresses range. If you cannot log in to Salesforce via SmartCloud Connect, make sure that the above listed IP addresses are included in Login / Trusted IP ranges of your Salesforce account or Org. Please find more info on how to manage them in this official Salesforce blog or official documentation regarding Login IP ranges and Trusted IP ranges.