How to Allowlist the IP Addresses and Other Related Resources¶

[ This article is work-in-progress ]

To allowlist the product components correctly, it is necessary to perform the following steps:

Determine the Scale Unit name
Based on Scale Unit, allowlist IP addresses of SAP Cloud for Customer Azure productive landscape
Allowlist the CDNs

Determine the Scale Unit name¶

To determine the Scale Unit (SU) name, do the following actions:

Download determine_su.zip and extract the su.bat file from it
Launch su.bat
In the opened window, enter tenant name in format “my######.crm.ondemand.com”
The tenant name will be displayed as follows:

In provided example Scale Unit name is “fratest“

Allowlist IP addresses of SAP Cloud for Customer Azure productive landscape for corresponding Scale Unit¶

Once you find your Scale Unit name, you can find the IP address for allowlisting that corresponds to your Scale Unit in the following table:

Productive landscape (IP Addresses)¶

Location	Scale Unit	Resource	Main location	List of PIPs in IP range		DR location	List of PIPs in IP range	Website (public DNS)
WDC	Wdcprod01	web, worker	40.89.246.90/31	40.89.246.90, 40.89.246.91	Wdcprod-AKS Wdcprod01	20.81.29.60/31	20.81.29.60, 20.81.29.61	sapcfc-sap-wdcprod01-sync.c4c.invisiblesolutions.com
WDC	Wdctest01	web, worker	52.186.90.126/31	52.186.90.126, 52.186.90.127	Wdctest-AKS Wdctest01	20.84.212.112/31	20.84.212.112, 20.84.212.113	sapcfc-sap-wdctest01-sync.c4c.invisiblesolutions.com
WDC mod			20.121.86.250/31	20.121.86.250; 20.121.86.251		52.228.162.70/31	52.228.162.70; 52.228.162.71
FRA FRA mod	Fraprod01-05 Fratest01 Fratest21 Fraprod21	web, worker	20.79.94.108/30 20.79.101.104/30 20.52.203.122/31 20.79.89.96/30	20.79.94.108, 20.79.94.109, 20.79.94.110, 20.79.94.111 20.79.101.104, 20.79.101.105, 20.79.101.106, 20.79.101.107 20.52.203.122, 20.52.203.123 20.79.89.96; 20.79.89.97; 20.79.89.98; 20.79.89.99	Fratest-AKS Fratest01 Fraprod01 Fraprod‑AKS Fraprod02 Fraprod03 Fraprod04 Fraprod05 Fratest21 Fraprod21	20.50.236.104/30 20.54.192.120/30 51.105.215.150/31 20.113.195.212/30	20.50.236.104, 20.50.236.105, 20.50.236.106, 20.50.236.107 20.54.192.120, 20.54.192.121, 20.54.192.122, 20.54.192.123 51.105.215.150, 51.105.215.151 20.113.195.212; 20.113.195.213; 20.113.195.214; 20.113.195.215	sapcfc-sap-fraprod[01..05]-sync.c4c.invisiblesolutions.com sapcfc-sap-fratest01-sync.c4c.invisiblesolutions.com sapcfc-sap-fratest21-sync.c4c.invisiblesolutions.com sapcfc-sap-fraprod21-sync.c4c.invisiblesolutions.com
PER PER mod	Perprod01 Pertest01	web, worker	40.115.90.12/31 20.53.187.192/31 20.70.88.90/31	40.115.90.12, 40.115.90.13 20.53.187.192, 20.53.187.193 20.70.88.90; 20.70.88.91	PerProd-AKS PerProd01 Pertest-AKS Pertest01	20.193.1.176/31 13.70.173.238/31 20.248.144.52/31	20.193.1.176, 20.193.1.177 13.70.173.238, 13.70.173.239 20.248.144.52; 20.248.144.53	sapcfc-sap-perprod01-sync.c4c.invisiblesolutions.com sapcfc-sap-pertest01-sync.c4c.invisiblesolutions.com

Allowlist the CDNs¶

The CDNs are the same for all Scale Units, so you may use the list of CDNs below to allowlist the corresponding CDNs:

Add-In CDNs¶

maxcdn.bootstrapcdn.com
code.jquery.com
cdnjs.cloudflare.com
appsforoffice.microsoft.com
unpkg.com
cdnjs.cloudflare.com

Server-Side Sync CDNs¶

cdnjs.cloudflare.com
fonts.googleapis.com
maxcdn.bootstrapcdn.com
cdn.jsdelivr.net
ajax.googleapis.com

Telemetry CDN¶

az416426.vo.msecnd.net

OAuth CDNs¶

https://login.windows.net
https://outlook.office365.com

Other CDNs¶

https://invisiblesolutions.com
https://appsforoffice.microsoft.com/lib/1.1/hosted/office.js
https//az416426.vo.msecnd.net/scripts/a/ai.0.js
(customer’s tenant URL)
Customer EWS URL and JSON metadata URL’s in case of on-prem Exchange