How to Resolve Firewall Issues to Get Revenue Inbox Running

Office 365

Some network environments are locked down via a Firewall and allow connecting only to whitelisted IP addresses from within their corporate networks.

The table below lists Revenue Inbox resources IPs which must be whitelisted in your local firewall settings for inbound/outbound connection.

Important

All listed IPs are guaranteed to be secure, according to our privacy and security policies; transferred data is encrypted with TLS 1.3.

 

Firewall exceptions for Revenue Inbox post-March 2, 2020

In the latest update, Revenue Inbox Stable build servers IP addresses were changed.

 

Why were they changed?

  • RI server-side performance boosting (with up-to-date server equipment)
  • Possible server-side disaster recovery scenarios improvement, by reducing users impact and functions recovery time (using the extra backup servers)
  • Some of the reserved addresses are in resting state, they will be used in case of main servers downing, ensuring minimum users impact; they will be left unchanged in case of future server-side migrations

 

Note: the list also includes backup servers ensuring extra stability.

Source Destination Port / Protocol Details
End users’ devices [outgoing connections]
40.123.42.131
104.46.107.64
104.210.0.177
137.116.78.243
40.79.72.21
104.46.111.101
104.46.106.216
40.79.79.249
40.123.42.131
104.46.107.64
104.210.0.177
104.43.242.50
104.43.242.219
40.113.246.179
13.89.57.7
40.113.227.172
40.113.245.239
40.113.226.5
40.113.236.214
104.43.242.50
104.43.242.219
40.113.246.179
104.209.194.164
104.209.233.92
40.70.28.19
40.70.27.35
40.70.29.233
104.209.236.89
40.70.31.17
104.209.194.52
104.209.194.164
104.209.233.92
40.70.28.19
52.173.29.78
52.173.26.186
52.173.26.166
104.43.246.71
52.173.24.19
52.173.26.122
52.173.26.85
13.89.219.71
52.173.29.78
52.173.26.186
52.173.26.166
13.86.99.8/30
52.154.56.160/28
52.167.85.92/30
52.167.85.112/28
443 / HTTPS Revenue Inbox Synchronization connections (MS Azure infrastructure)
[incoming connections]
40.123.42.131
104.46.107.64
104.210.0.177
137.116.78.243
40.79.72.21
104.46.111.101
104.46.106.216
40.79.79.249
40.123.42.131
104.46.107.64
104.210.0.177
104.43.242.50
104.43.242.219
40.113.246.179
13.89.57.7
40.113.227.172
40.113.245.239
40.113.226.5
40.113.236.214
104.43.242.50
104.43.242.219
40.113.246.179
104.209.194.164
104.209.233.92
40.70.28.19
40.70.27.35
40.70.29.233
104.209.236.89
40.70.31.17
104.209.194.52
104.209.194.164
104.209.233.92
40.70.28.19
52.173.29.78
52.173.26.186
52.173.26.166
104.43.246.71
52.173.24.19
52.173.26.122
52.173.26.85
13.89.219.71
52.173.29.78
52.173.26.186
52.173.26.166
13.86.99.8/30
52.154.56.160/28
52.167.85.92/30
52.167.85.112/28
Users’ Exchange server
Users’ Salesforce Org configuration
443 / HTTPS Revenue Inbox connections required for emails and calendar items syncing
End users’ devices sfpfeastus01.smartcloudconnect.io

sfdclivemailapp-invisiblecrm.azurewebsites.net
sfdc-live-desktop-invisible.azurewebsites.net
*.invisible.io
*.invisiblesolutions.com
smart.sf.invisiblesolutions.com
443 / HTTPS Required RevenueGrid.com resources
End users’ devices maxcdn.bootstrapcdn.com
appsforoffice.microsoft.com
fonts.googleapis.com
code.jquery.com
fastcdn.org
cdnjs.cloudflare.com
cdn.jsdelivr.net
ajax.googleapis.com
az416426.vo.msecnd.net
cdn.mxpnl.com
443 / HTTPS Auxiliary CDN, API, and other resources used by RI Add-In
End users’ devices *.salesforce.com
dc.services.visualstudio.com
static2.sharepointonline.com
ajaxhttpheaders.appspot.com
logo.clearbit.com
autocomplete.clearbit.com
api.genderize.io
api.ipify.org
tag.getdrip.com
static.userguiding.com
api.userguiding.com
ust.userguiding.com
443 / HTTPS If you have issues with opening Revenue Inbox Sidebar, Sync management dashboard, Customization page, or RI Admin panel, also add these resources to the whitelist of your firewall (or proxy server)
These are required Salesforce, Microsoft, wizards rendering, and other relevant resources

 

In addition, in some Orgs Salesforce logging in and data access are restricted by a pre-set IP addresses range. If you cannot log in to Salesforce via Revenue Inbox, make sure that the above listed IP addresses are included in Login / Trusted IP ranges of your Salesforce account or Org. Please find more info on how to manage them in this official Salesforce blog or official documentation regarding Login IP ranges and Trusted IP ranges.