Domains for the firewall allowlist for Dynamic Cloud Voice Platform
The domains listed and described in this article that specifically apply to your network configuration should be added to your allowlist or approved for authorized access.
For more information about other ports and services you may need to configure on your firewall, see About ports and services for your firewall.
Individual regions
The domains listed in this table provide the Genesys Cloud interface for users and admins. These domains are region-specific and each Genesys Cloud organization exists within only one region. Entities with multiple organizations may be deployed in various regions.
| Region | Domain |
|---|---|
| North America | |
| United States |
*.use1.pure.cloud *.usw2.pure.cloud *.byoc.use1.genesys.cloud *.byoc.usw2.genesys.cloud |
| FedRAMP |
*.use2.us-gov-pure.cloud *.byoc.use2.us-gov-genesys.cloud |
| Canada |
*.cac1.pure.cloud *.byoc.cac1.genesys.cloud |
| South America | |
| Sao Paulo |
*.sae1.pure.cloud *.byoc.sae1.genesys.cloud |
| Asia Pacific | |
| Sydney |
*.apse2.pure.cloud *.mypurecloud.com.au *.byoc.apse2.genesys.cloud |
| Tokyo |
*.apne1.pure.cloud *.mypurecloud.jp *.byoc.apne1.genesys.cloud |
| Seoul |
*.apne2.pure.cloud *.byoc.apne2.genesys.cloud |
| Mumbai |
*.aps1.pure.cloud *.byoc.aps1.genesys.cloud |
| Osaka |
*.apne3.pure.cloud *.byoc.apne3.genesys.cloud |
| EMEA | |
| Ireland |
*.euw1.pure.cloud *.mypurecloud.ie *.byoc.euw1.genesys.cloud |
| Frankfurt |
*.euc1.pure.cloud *.mypurecloud.de *.byoc.euc1.genesys.cloud |
| London |
*.euw2.pure.cloud *.byoc.euw2.genesys.cloud |
| Zurich |
*.euc2.pure.cloud *.byoc.euc2.genesys.cloud |
| UAE |
*.mec1.pure.cloud *.byoc.mec1.genesys.cloud |
All regions
The domains listed in this table apply to all regions. Descriptions of what each domain provides are included in the table.
| Domain | Description |
|---|---|
| *.mypurecloud.com | Provides the Genesys Cloud interface for users and admins. |
| help.mypurecloud.com |
Provides access to the Genesys Cloud Resource Center for product documentation. Optional‡ |
| *.genesys.cloud |
Provides access to the Genesys Cloud Developer Center for code samples, tutorials, and tools to help integrate Genesys Cloud into your contact center. Optional‡ |
| announcement. mypurecloud.com |
Provides access to in-app announcements about new features. Optional‡ |
| sdk-cdn.mypurecloud.com |
Provides access to the Developer Center for software development kits. Optional‡ |
| appfoundry.genesys.com |
Provides access to the AppFoundry for application and integration solutions. Optional‡ |
|
‡ These domains are optional. Having access to these domains may help customers access documentation, announcements, software development kits, or AppFoundry solutions but they aren’t required. You can block these domains without affecting the overall functioning of Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
Static CloudFront domain
Genesys uses a static CloudFront domain to deliver certain universal data objects necessary for Genesys Cloud to operate across all regions. The domain listed in this table applies to all regions.
| Domain | Description |
|---|---|
|
dhqbrvplips7x.cloudfront.net |
Provides static content for Genesys Cloud applications. |
Regional FQDNs for CloudFront content
Genesys uses Amazon CloudFront to store API downloads for Genesys Cloud. Use the FQDN for your region to provide access to APIs for Genesys Cloud applications.
| Region | FQDN |
|---|---|
| US East (N. Virginia) | https://api-downloads.mypurecloud.com |
| US East 2 (FedRAMP) | https://api-downloads.use2.us-gov-pure.cloud |
| US West (Oregon) | https://api-downloads.usw2.pure.cloud |
| Canada (Central) | https://api-downloads.cac1.pure.cloud |
| South America (São Paulo) | https://api-downloads.sae1.pure.cloud |
| Europe (Frankfurt) | https://api-downloads.mypurecloud.de |
| Europe (Ireland) | https://api-downloads.mypurecloud.ie |
| Europe (London) | https://api-downloads.euw2.pure.cloud |
| Europe (Zurich) | https://api-downloads.euc2.pure.cloud |
| Middle East (UAE) | https://api-downloads.mec1.pure.cloud |
| Asia Pacific (Mumbai) | https://api-downloads.aps1.pure.cloud |
| Asia Pacific (Seoul) | https://api-downloads.apne2.pure.cloud |
| Asia Pacific (Sydney) | https://api-downloads.mypurecloud.com.au |
| Asia Pacific (Tokyo) | https://api-downloads.mypurecloud.jp |
| Asia Pacific (Osaka) | https://api-downloads.apne3.pure.cloud |
Regional FQDNs for managed phone firmware distribution
Genesys uses Amazon CloudFront to store phone firmware downloads for Genesys Cloud. Use the FQDN for your region to provide access to firmware downloads for your phones.
| Region | FQDN |
|---|---|
| US East (N. Virginia) | https://d29e6q0340ucs1.cloudfront.net |
| US East 2 (FedRAMP) | https://d2288v0yv0x44b.cloudfront.net |
| US West (Oregon) | https://d1bpw2v7jxdtjt.cloudfront.net |
| Canada (Central) | https://d3e18t5w6avovi.cloudfront.net |
| South America (São Paulo) | https://d8fqp2tni48m1.cloudfront.net |
| Europe (Frankfurt) | https://d1u04v5uuzd6tm.cloudfront.net |
| Europe (Ireland) | https://d3r4d0ubch17l.cloudfront.net |
| Europe (London) | https://d35hvbcb1u06wn.cloudfront.net |
| Europe (Zurich) | https://d3u6nd8oads5y8.cloudfront.net |
| Middle East (UAE) | https://d37wh7ku5m5785.cloudfront.net |
| Asia Pacific (Mumbai) | https://d3u9ox7toxavhv.cloudfront.net |
| Asia Pacific (Seoul) | https://d132n068zsdlan.cloudfront.net |
| Asia Pacific (Sydney) | https://d2yfg1vhdbl2x0.cloudfront.net |
| Asia Pacific (Tokyo) | https://d1cfyvelszspa6.cloudfront.net |
| Asia Pacific (Osaka) | https://d3f0adxc27s6tg.cloudfront.net |
|
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
The domains listed in this table apply to all regions.
| Domain | Description |
|---|---|
|
fonts.googleapis.com maps.googleapis.com |
Provides cascading style sheet (CSS), font information, and map information. |
| fonts.gstatic.com | Provides static content including fonts. |
| *.l.google.com |
Provides STUN services for Edge devices, VoIP phones, WebRTC softphones, and Collaborate multimedia. This domain is optional. For more information, see Does port 19302 for Google’s STUN need to be open? |
| dns.google | The Edge tests for internet connectivity by pinging 8.8.8.8. (This is the IP address of dns.google.) |
|
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
| *.js-agent.newrelic.com | Requests made by client-side New Relic analytics browser applications. |
| *.bam.nr-data.net | Requests made by client-side New Relic analytics browser applications. |
|
† Third-party service; not hosted by Genesys Cloud. ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
| time.nist.gov |
The NIST servers listen for an NTP request on port 123, and respond by sending a udp/ip data packet in the NTP format. The data packet includes a 64-bit time stamp. Note: The global address time.nist.gov is resolved to all of the appropriate server addresses.
|
| † Third-party service; not hosted by Genesys Cloud. |
| Domain | Description |
|---|---|
| *.ztp.polycom.com | Provides zero-touch phone provisioning for Polycom VoIP phones. |
|
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that the services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
|
*.contentsquare.net *.contentsquare.com |
Provides user analytics for Genesys Cloud to help teams identify areas for improvement. |
|
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that the services may exist in one or more subdomains of the defined domain. |
† Third-party service; not hosted by Genesys Cloud.
ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains.
| Modified date (YYYY-MM-DD) |
Revision |
|---|---|
| 2025-09-26 | Updated the Domains for the firewall allowlist article with new information pertaining to the Dynamic Cloud Voice Platform feature. |
