Domains for the firewall allowlist
The domains listed and described in this article that specifically apply to your network configuration should be added to your allowlist or approved for authorized access.
For more information on other ports and services you may need to configure on your firewall, see About ports and services for your firewall.
Individual regions
The domains listed in this table provide the Genesys Cloud interface for users and admins. These domains are region-specific and each Genesys Cloud organization exists within only one region. Entities with multiple organizations may be deployed in various regions.
| Region | Domain |
|---|---|
| North America | |
| United States |
*.use1.pure.cloud *.usw2.pure.cloud |
| FedRAMP | *.use2.us-gov-pure.cloud |
| Canada | *.cac1.pure.cloud |
| South America | |
| Sao Paulo | *.sae1.pure.cloud |
| Asia Pacific | |
| Sydney |
*.apse2.pure.cloud *.mypurecloud.com.au |
| Tokyo |
*.apne1.pure.cloud *.mypurecloud.jp |
| Seoul | *.apne2.pure.cloud |
| Mumbai | *.aps1.pure.cloud |
| Osaka | *.apne3.pure.cloud |
| EMEA | |
| Ireland |
*.euw1.pure.cloud *.mypurecloud.ie |
| Frankfurt |
*.euc1.pure.cloud *.mypurecloud.de |
| London | *.euw2.pure.cloud |
| Zurich | *.euc2.pure.cloud |
| UAE | *.mec1.pure.cloud |
All regions
The domains listed in this table apply to all regions. Descriptions of what each domain provides is included in the table.
| Domain | Description |
|---|---|
| *.mypurecloud.com | Provides the Genesys Cloud interface for users and admins. |
| help.mypurecloud.com |
Provides access to the Genesys Cloud Resource Center for product documentation. Optional‡ |
| *.genesys.cloud |
Provides access to the Genesys Cloud Developer Center for code samples, tutorials, and tools to help integrate Genesys Cloud into your contact center. Optional‡ |
| announcement. mypurecloud.com |
Provides access to in-app announcements about new features. Optional‡ |
| sdk-cdn.mypurecloud.com |
Provides access to the Developer Center for software development kits. Optional‡ |
| appfoundry.genesys.com |
Provides access to the AppFoundry for application and integration solutions. Optional‡ |
|
‡ These domains are optional. Having access to these domains may help customers access documentation, announcements, software development kits, or AppFoundry solutions but they aren’t required. You can block these domains without affecting the overall functioning of Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
The domains listed in this table apply to all regions.
| Domain | Description |
|---|---|
| *.cloudfront.net | Provides static content for Genesys Cloud applications. |
|
*.s3.amazonaws.com where {region} is the domain for your particular region. |
Provides S3 download links. |
|
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
The domains listed in this table apply to all regions.
| Domain | Description |
|---|---|
| *.googleapis.com | Provides cascading style sheet (CSS) and font information. |
| *.gstatic.com | Provides static content, mainly images. |
| *.l.google.com | Provides STUN services for Edge devices, VoIP phones, WebRTC softphones, and Collaborate multimedia. |
| dns.google | The Edge tests for internet connectivity by pinging 8.8.8.8. (This is the IP address of dns.google.) |
|
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
| *.js-agent.newrelic.com | Requests made by client-side New Relic analytics browser applications. |
| *.bam.nr-data.net | Requests made by client-side New Relic analytics browser applications. |
|
† Third-party service; not hosted by Genesys Cloud. ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
| time.nist.gov |
The NIST servers listen for an NTP request on port 123, and respond by sending a udp/ip data packet in the NTP format. The data packet includes a 64-bit timestamp. Note: The global address time.nist.gov is resolved to all of the appropriate server addresses.
|
| † Third-party service; not hosted by Genesys Cloud. |
| Domain | Description |
|---|---|
| *.ztp.polycom.com | Provides zero-touch phone provisioning for Polycom VoIP phones. |
|
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that the services may exist in one or more subdomains of the defined domain. |
† Third-party service; not hosted by Genesys Cloud.
ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains.
| Modified date (YYYY-MM-DD) |
Revision |
|---|---|
| 2024-06-24 | Removed the new domains
and replaced with the previous domains.
|
| 2024-06-10 | Reorganized the table layout. Replaced *.s3.amazonaws.com and related regional domains with
|
| 2024-01-31 | Reorganized the table layout to better accommodate the new regions. |
| 2024-01-24 | Added Osaka, UAE, and Zurich regions. |
| 2024-01-17 | Changed Developer Center domain from developer.genesys.cloud to *.genesys.cloud to include all of the subdomains. |
| 2022-10-19 | *.mypurecloud.com is now required for all regions; not just the United States. |
| 2022-03-23 | Added US East 2 (Ohio) region |
| 2021-03-26 | Added Mumbai (*.aps1.pure.cloud) to the Asia Pacific region. |
| 2021-02-24 | Added new regional (*.pure.cloud) domains to the Genesys Cloud section of the table. |
| 2020-12-14 | Broke out the main sections of the larger Ports and services for your firewall article into smaller articles. Created this article to cover the domains for your firewall allowlist. |
