For users on a corporate network or using VPN for remote connections to the corporate network, HTTPS on port 443 must be open system-wide and a series of URLs must be whitelisted on the firewall. This ensures all users have a seamless experience when they install and use Syncplicity on their PC, Mac, mobile, and web clients.
Whitelisting is only required if you are experiencing issues with connectivity.
Core Syncplicity service
- my.syncplicity.com:443
- eu.syncplicity.com:443
- download.syncplicity.com:443
- xml.syncplicity.com:443
- xml.eu.syncplicity.com:443
- rms.syncplicity.com:443
- event.syncplicity.com:443
- event.eu.syncplicity.com:443
- gol.syncplicity.com:443
- amq.syncplicity.com:443
- *.syncplicity.com:443
Cloud storage
The following cloud storage endpoints should be whitelisted for deployments that use cloud storage. For on-premises storage, the corresponding on-premises storage endpoint URLs should be accessible.
- data.syncplicity.com:443
- data-eu.syncplicity.com:443
- data-eu.eu.syncplicity.com:443
- data-us.eu.syncplicity.com:443
Data analytics
- SSL.google-analytics.com:443
Online file browser
- fonts.googleapis.com:443
- api.mixpanel.com:443
- ajax.googleapis.com:443
- ajax.aspnetcdn.com:443
API platform
- api.syncplicity.com:443
- api.eu.syncplicity.com:443
Developer portal
- developer.syncplicity.com:443
- developer.eu.syncplicity.com:443
Instrumentation
- beacon-1.newrelic.com:443
- health.syncplicity.com:443 (Syncplicity server used for storage connector health checks)
- health.eu.syncplicity.com:443 (Syncplicity EU server used for storage connector health checks)
Gravatar service
If you prevent access to this URL, avatars will not display in the activity feed or mobile apps.
- secure.gravatar.com:443
Support pages
- support.syncplicity.com:443
- syncplicity.zendesk.com:443
Configuring email servers for Syncplicity
- Whitelist 'syncplicity.com' domain on all email servers
WOPI
- wopi.gov.syncplicity.com:443
- wopi.syncplicity.com:443
- wopi-eu.eu.syncplicity.com:443
- wopi-eu.syncplicity.com:443
- wopi-us.eu.syncplicity.com:443
- bootstrapper.wopi.syncplicity.com:443
- oauth.syncplicity.com:443
- xml.syncplicity.com:443
- xml.eu.syncplicity.com:443
- gol.syncplicity.com:443
Metadata services
- metadata.syncplicity.com:443
- metadata.eu.syncplicity.com:443
- metadata.gov.syncplicity.com:443
Discovery
- onenote.officeapps.live.com/hosting/discovery
Connector ports configuration
- On-Premise Storage Connector - see Network conifguration.
- DLP Connector - see Install and configure the DLP/AV Connector.
- WOPI Connector - see Prerequisites for WOPI Connector.
- Syncplicity® AD Sync Tool - send an email to support@syncplicity.com and request the Installation and Configuration Guide.
Notes
- Best practice is to use host names and URLs instead of IP addresses. This avoids the risk of a deprecated user experience due to an IP address changes.
- Newer hardware and secureOS can assign names to IPs with object-groups. Due to older firewalls it may be difficult to use host names, in which case it is recommended to use a reverse proxy.
-
To acquire the current Syncplicity service IP addresses, perform an
nslookupon Syncplicity services (such as xml.syncplicity.com). Keep in mind, IPs can change with minimal warning. - The full list of addresses are subject to change based upon Microsoft and may not all be certified. For a reference see https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges#microsoft-365-common-and-office-online.