Domains for the firewall allowlist

Those domains that are listed and described in this table that specifically apply to your network configuration should be added to your allowlist or approved for authorized access. 

For more information on other ports and services you may need to configure on your firewall, see About ports and services for your firewall

Owner Domain Region Description
Genesys Cloud 

 

*.mypurecloud.com

*.use1.pure.cloud

*.usw2.pure.cloud

*.cac1.pure.cloud

North America

United States

 

 

Canada

Provides the Genesys Cloud interface for users and admins; domains are region-specific and each Genesys Cloud organization exists within only one region. Entities with multiple organizations may be deployed in various regions.

 

*.mypurecloud.com.au

*.apse2.pure.cloud

*.mypurecloud.jp

*.apne1.pure.cloud

*.apne2.pure.cloud

*.aps1.pure.cloud

Asia Pacific

Sydney

 

Tokyo

 

Seoul

Mumbai

 

*.mypurecloud.ie

*.euw1.pure.cloud

*.mypurecloud.de

*.euc1.pure.cloud

*.euw2.pure.cloud

EMEA

Ireland

 

Frankfurt

 

London

 

*.ininpcv.com North America Provides voice and configuration services for Genesys Cloud Voice phones. (Genesys Cloud Voice customers only). This domain is legacy and not used for new customers.
help.mypurecloud.com All

Provides access to the Genesys Cloud  Resource Center for product documentation.

Optional

announcement.
mypurecloud.com

All

Provides access to in-app announcements about new features.

Optional

sdk-cdn.mypurecloud.com

All

Provides access to the Developer Center for software development kits.

Optional

appfoundry.genesys.com

All

Provides access to the AppFoundry for application and integration solutions.

Optional

Amazon AWS *.cloudfront.net All Provides static content for Genesys Cloud applications.

*.s3.amazonaws.com

*.s3-{region}.amazonaws.com

*.s3.{region}.amazonaws.com

where {region} is the domain for your particular region.

All Provides S3 download links.
Google *.googleapis.com All Provides cascading style sheet (CSS) and font information.
*.gstatic.com All Provides static content, mainly images.
*.l.google.com All Provides STUN services for Edge devices, VoIP phones, WebRTC softphones, and Collaborate multimedia.
dns.google All The Edge tests for internet connectivity by pinging 8.8.8.8. (This is the IP address of dns.google.)
New Relic *.js-agent.newrelic.com All Requests made by client-side New Relic analytics browser applications.
*.bam.nr-data.net All Requests made by client-side New Relic analytics browser applications.
National Institute of Standards and Technology (NIST)

time.nist.gov

All (The global address time.nist.gov is resolved to all of the appropriate server addresses.) The NIST servers listen for an NTP request on port 123, and respond by sending a udp/ip data packet in the NTP format. The data packet includes a 64-bit timestamp.
Polycom *.ztp.polycom.com All Provides zero-touch phone provisioning for Polycom VoIP phones.

† Third-party service; not hosted by Genesys Cloud.

‡ These domains are optional. Having access to these domains may help customers access documentation, announcements, software development kits, or AppFoundry solutions but they aren’t required. You can block these domains without affecting the overall functioning of Genesys Cloud.

An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain.

Date Revision
March 26, 2021 Added Mumbai (*.aps1.pure.cloud) to the Asia Pacific region.
February 24, 2021 Added new regional (*.pure.cloud) domains to the Genesys Cloud section of the table.
December 14, 2020 Broke out the main sections of the larger Ports and services for your firewall article into smaller articles. Created this article to cover the domains for your firewall allowlist.