Domains for the firewall allowlist

The domains listed and described in this article that specifically apply to your network configuration should be added to your allowlist or approved for authorized access. 

For more information about other ports and services you may need to configure on your firewall, see About ports and services for your firewall. 

Individual regions

The domains listed in this table provide the Genesys Cloud interface for users and admins. These domains are region-specific and each Genesys Cloud organization exists within only one region. Entities with multiple organizations may be deployed in various regions.

Region Domain
North America
United States

*.use1.pure.cloud                                                                                              

*.usw2.pure.cloud
FedRAMP *.use2.us-gov-pure.cloud
Canada *.cac1.pure.cloud
South America
Sao Paulo *.sae1.pure.cloud
Asia Pacific
Sydney

*.apse2.pure.cloud

*.mypurecloud.com.au
Tokyo

*.apne1.pure.cloud

*.mypurecloud.jp
Seoul *.apne2.pure.cloud
Mumbai *.aps1.pure.cloud
Osaka *.apne3.pure.cloud
EMEA
Ireland

*.euw1.pure.cloud

*.mypurecloud.ie
Frankfurt

*.euc1.pure.cloud

*.mypurecloud.de
London *.euw2.pure.cloud
Zurich *.euc2.pure.cloud
UAE *.mec1.pure.cloud

All regions

The domains listed in this table apply to all regions. Descriptions of what each domain provides are included in the table.

Domain Description
*.mypurecloud.com Provides the Genesys Cloud interface for users and admins.
help.mypurecloud.com

Provides access to the Genesys Cloud Resource Center for product documentation.

Optional‡
*.genesys.cloud

Provides access to the Genesys Cloud Developer Center for code samples, tutorials, and tools to help integrate Genesys Cloud into your contact center.

Optional‡
announcement.
mypurecloud.com

Provides access to in-app announcements about new features.

Optional‡
sdk-cdn.mypurecloud.com

Provides access to the Developer Center for software development kits.

Optional‡
appfoundry.genesys.com

Provides access to the AppFoundry for application and integration solutions.

Optional‡

‡ These domains are optional. Having access to these domains may help customers access documentation, announcements, software development kits, or AppFoundry solutions but they aren’t required. You can block these domains without affecting the overall functioning of Genesys Cloud.

An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain.

Note: The *.ininpcv.com domain is legacy and not used for new customers. This legacy domain applies to North American Genesys Cloud Voice customers only and provides voice and configuration services for Genesys Cloud Voice phones.

Static CloudFront domain 

Genesys uses a static CloudFront domain to deliver certain universal data objects necessary for Genesys Cloud to operate across all regions. The domain listed in this table applies to all regions.

Domain Description

dhqbrvplips7x.cloudfront.net

 Provides static content for Genesys Cloud applications.

Regional FQDNs for CloudFront content

Genesys uses Amazon CloudFront to store API downloads for Genesys Cloud. Use the FQDN for your region to provide access to APIs for Genesys Cloud applications.

 

Region FQDN
US East (N. Virginia) https://api-downloads.mypurecloud.com
US East 2 (FedRAMP) https://api-downloads.use2.us-gov-pure.cloud
US West (Oregon) https://api-downloads.usw2.pure.cloud
Canada (Central) https://api-downloads.cac1.pure.cloud
South America (São Paulo) https://api-downloads.sae1.pure.cloud
Europe (Frankfurt) https://api-downloads.mypurecloud.de
Europe (Ireland) https://api-downloads.mypurecloud.ie
Europe (London) https://api-downloads.euw2.pure.cloud
Europe (Zurich) https://api-downloads.euc2.pure.cloud
Middle East (UAE) https://api-downloads.mec1.pure.cloud
Asia Pacific (Mumbai) https://api-downloads.aps1.pure.cloud
Asia Pacific (Seoul) https://api-downloads.apne2.pure.cloud
Asia Pacific (Sydney) https://api-downloads.mypurecloud.com.au
Asia Pacific (Tokyo) https://api-downloads.mypurecloud.jp
Asia Pacific (Osaka) https://api-downloads.apne3.pure.cloud

† Third-party service; not hosted by Genesys Cloud.

An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain.                                                                  

The domains listed in this table apply to all regions.

Domain Description
*.googleapis.com Provides cascading style sheet (CSS) and font information.
*.gstatic.com Provides static content, mainly images.
*.l.google.com Provides STUN services for Edge devices, VoIP phones, WebRTC softphones, and Collaborate multimedia.
dns.google The Edge tests for internet connectivity by pinging 8.8.8.8. (This is the IP address of dns.google.)

† Third-party service; not hosted by Genesys Cloud.

An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain.                                                                  

Domain Description
*.js-agent.newrelic.com Requests made by client-side New Relic analytics browser applications.
*.bam.nr-data.net Requests made by client-side New Relic analytics browser applications.

† Third-party service; not hosted by Genesys Cloud.

ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains.

An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain.

Domain Description
time.nist.gov

The NIST servers listen for an NTP request on port 123, and respond by sending a udp/ip data packet in the NTP format. The data packet includes a 64-bit time stamp.

Note: The global address time.nist.gov is resolved to all of the appropriate server addresses.
† Third-party service; not hosted by Genesys Cloud.                                                                                                                                                                   

Domain Description
*.ztp.polycom.com Provides zero-touch phone provisioning for Polycom VoIP phones.

† Third-party service; not hosted by Genesys Cloud.

An asterisk (*) prefix indicates that the services may exist in one or more subdomains of the defined domain.                                                           

Domain Description

*.contentsquare.net

*.contentsquare.com

 Provides user analytics for Genesys Cloud to help teams identify areas for improvement.

† Third-party service; not hosted by Genesys Cloud.

An asterisk (*) prefix indicates that the services may exist in one or more subdomains of the defined domain.                                                           

† Third-party service; not hosted by Genesys Cloud.

ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains.

 

Modified date
(YYYY-MM-DD)		 Revision
2024-11-18

Genesys Cloud resolved the issue with the CloudFront domains in the three AWS regions:

  • Asia Pacific (Osaka)
  • Europe (Zurich)
  • Middle East (UAE)

Genesys Cloud now uses Amazon CloudFront URLs to serve content stored in Amazon S3 to all supported AWS regions.
2024-11-01

Genesys Cloud encountered an issue with the new CloudFront domains, released October 28, 2024, in three of the supported AWS regions: 

  • Asia Pacific (Osaka)
  • Europe (Zurich)
  • Middle East (UAE)

Until this issue is resolved, organizations in these AWS regions will need to continue to permit access to the s3 domains in their firewall allowlist to provide access to content stored in Amazon S3:

  • *.s3.amazonaws.com
  • *.s3.{region}.amazonaws.com
  • *.s3-{region}.amazonaws.com
2024-10-28

Removed Genesys Cloud *.s3 domain entries and replaced with CloudFront URLs.

Genesys Cloud now uses Amazon CloudFront URLs to serve content stored in Amazon S3.

For more information, see October 28, 2024 Release Notes. 
2024-09-30

Added ContentSquare domains.
2024-06-24

Removed the new domains 

  • prod*-inin-directory-service-profile.s3.*.amazonaws.com
  • prod*-inin-directory-service-upload.s3.*.amazonaws.com
  • prod*-inin-directory-service- static-client-resources.s3.*.amazonaws.com

and replaced with the previous domains.

 
2024-06-10

Reorganized the table layout.

Replaced *.s3.amazonaws.com and related regional domains with

  • prod*-inin-directory-service-profile.s3.*.amazonaws.com
  • prod*-inin-directory-service-upload.s3.*.amazonaws.com
  • prod*-inin-directory-service- static-client-resources.s3.*.amazonaws.com
2024-01-31

Reorganized the table layout to better accommodate the new regions.
2024-01-24

Added Osaka, UAE, and Zurich regions.
2024-01-17

Changed Developer Center domain from developer.genesys.cloud to *.genesys.cloud to include all of the subdomains.
2022-10-19

*.mypurecloud.com is now required for all regions; not just the United States.
2022-03-23

Added US East 2 (Ohio) region
2021-03-26

Added Mumbai (*.aps1.pure.cloud) to the Asia Pacific region.
2021-02-24

Added new regional (*.pure.cloud) domains to the Genesys Cloud section of the table.
2020-12-14

Broke out the main sections of the larger Ports and services for your firewall article into smaller articles. Created this article to cover the domains for your firewall allowlist.