Automation Cloud Public Sector admin guide

Last updated Jun 30, 2025

Configuring the firewall

This page lists the domains used by Automation Cloud^TM Public Sector and our other cloud services. You can use this information to compile an allow list for UiPath® software in the configuration of your company's perimeter network.

In the event that your company restricts access to only allowed websites, you must allow accessing the necessary domains based on the UiPath products you use and the scenarios per product that you use. If you do not allow access to the required domains, Automation Cloud^TM Public Sector may not function as intended.

Automation Cloud Public Sector Portal

The following table lists the domains used by Automation Cloud Public Sector Portal:

Scenario	Domains to Allow
UiPath Automation Cloud Public Sector	`https://govcloud.uipath.us` `https://govcloud.uipath.us/portal_/cloudrpa` `https://govcloud.uipath.us/portal_/signinwithsso` `https://govcloud.uipath.us/<accountname>/` `https://govcloud.uipath.us/<accountname>/<tenantname>/portal`
Login flows (configured via SSO)	`https://login.microsoftonline.com`
Sign in with Azure Active Directory (Azure AD)	`https://aadcdn.msftauth.net` `https://govcloud.uipath.us` `https://login.microsoftonline.com`
Sign in with UiPath Assistant (basic email)	`*-signalr.service.signalr.net` For events related to signing in with basic authentication: `https://account.uipath.com` `https://govcloud.uipath.us` `https://platform-cdn.uipath.com`
Sign in with UiPath Studio (basic email)	`https://api.nuget.org` `*-signalr.service.signalr.net` `https://gallery.uipath.com` `https://pkgs.dev.azure.com` For events related to signing in with basic authentication: `https://account.uipath.com` `https://govcloud.uipath.us` `https://platform-cdn.uipath.com`
Static assets: Fonts, Styling and CDN hosted scripts	Fonts: `https://use.typekit.net` `https://fonts.gstatic.com` `https://platform-cdn.uipath.com` Images: `https://s.gravatar.com` `https://secure.gravatar.com` `https://.wp.com` `https://.googleusercontent.com` `https://i.ytimg.com` `https://platform-cdn.uipath.com` CSS: `https://fonts.googleapis.com/css` `https://use.typekit.net` `https://p.typekit.net` `https://platform-cdn.uipath.com` `https://staticresources.uipath.us` Scripts: `https://primer.typekit.net` `https://use.typekit.net` `https://platform-cdn.uipath.com`
Sign in via Auth0 (for EU)	`uipath.eu.auth0.com`
Update services	`ctldl.windowsupdate.com` To configure network connections, use Microsoft documentation.
App Insights / Google Tag Manager	`https://usgovvirginia-0.in.applicationinsights.azure.us` `https://www.googletagmanager.com/gtm.js?id=GTM-PLLP8P` `https://code.jquery.com/jquery-3.5.1.min.js`

Important: If you use Azure buckets, they must not be located in the tenant's region or in the failover region.

Outbound IPs

To ensure proper functionality for UiPath services, we recommend allowing the following IPs:

52.247.128.100
52.227.65.197
52.245.221.12

Action Center

The following table lists the domains used by Action Center:

Scenario	Domains to Allow
Navigate to Action Center page	`https://govcloud.uipath.us/<accountName>/<tenantName>/actions_` `https://govcloud.uipath.us/<accountName>/<tenantName>/processes_` `https://govcloud.uipath.us/<accountName>/<tenantName>/bupproxyservice_` `https://uipath-acc-pgov.uipath.us`

AI Computer Vision

The following table lists the endpoint values and server locations used by AI Computer Vision:

Automation Hub

The following table lists the domains used by Automation Hub:

Scenario	Domains to Allow
Navigate to the Automation Hub page	`https://govcloud.uipath.us` `http://*.userpilot.io` `https://dc.services.visualstudio.com` `https://ah-prod-ts-blue-eu.uipath.com` `https://ah-prod-ts-blue-us.uipath.com` `https://ah-prod-ts-blue-ja.uipath.com` `https://ah-prod-ts-blue-au.uipath.com` `https://ah-prod-ts-blue-ca.uipath.com` `https://ah-prod-ts-blue-sea.uipath.com` `https://ah-prod-ts-blue-uk.uipath.com` `https://ah-prod-ts-blue-in.uipath.com` `https://ah-gxp-ts-blue-us.uipath.com`
Use OpenAPI for Automation Hub	`https://automation-hub.uipath.com` `http://ah-gxp-openapi-us.uipath.com`
Access Public Sector in Automation Hub	https://govcloud.uipath.us

Automation Ops

The following table lists the domains used by Automation Ops:

Scenario	Domains to Allow
Navigate to the Automation Ops page	`https://usgovvirginia-0.in.applicationinsights.azure.us` `https://govcloud.uipath.us` `https://staticresources.uipath.us` `*-signalr.signalr.azure.us` `https://use.typekit.net` `https://p.typekit.net`

Data Service

The following table lists the domains used by Data Service:

Scenario	Domains to Allow
All Data Service operations	`https://govcloud.uipath.us`
Fetching static frontend content	`https://staticds.uipath.us`

Document Understanding

The following table lists the domains used by Document Understanding:

Module or Scenario	Domains to Allow
Network and Storage	`https://*.uipath.us`
Telemetry and SignalR	`https://*.azure.us`
Public endpoints	Check the Public endpoints page for the full list of public endpoints URLs.

Insights

The following table lists the domains used by Insights:

Scenario	Domains to Allow
Navigate to the Insights page	`https://govcloud.uipath.us` `https://.lookercdn.com` `https://uipath-insights-statics.azureedge.net/` `https://.looker.uipath.com/`

Static IPs

Static IPs allow you to add a list of IPs for the Log Export functionality to the allowlist and not open your network to all external IPs.

To ensure proper performance for the Log Export functionality, make sure to add the Outbound IPs from the Automation Cloud Public Sector Portal section to the allowlist.

Limitations

Due to a limitation on Microsoft side for Log Export, you cannot set up inbound IP restriction when your Azure blob storage account and the Insights infrastructure is under the same region in Azure. Because of this, you cannot use the USGov Virginia region for the blob storage account. For more information on this limitation, check the Restrictions for IP network rules page from the Microsoft Azure Blob Storage documentation.

Orchestrator

Robots send traffic to these Automation Cloud^TM Public Sector Orchestrator domains. We recommend that you allow them to ensure proper functioning of your automations, as described in the following table:

Module or Functionality	Domains to Allow
UiPath Orchestrator	`https://govcloud.uipath.us` `https://orch-cdn.uipath.com` `https://account.uipath.com`
Automation Cloud^TM Public Sector Robots - VM	`https://govcloud.uipath.us` `https://download.uipath.com`
Storage	If using Amazon s3 buckets: `*.s3.amazonaws.com`
Package and library feeds (library, tenant processes, and others)	`https://pkgs.dev.azure.com`
Azure SignalR	`*.service.signalr.net`
Studio and Robot auto-update functionality	`https://download.uipath.com`
Traffic Manager (internal)	`*.trafficmanager.net`

Process Mining

The following table lists the domains used by Process Mining:

Module or Scenario	Domains to Allow
Identity Server	`https://govcloud.uipath.us`
Static assets	`https://fonts.googleapis.com` `https://fonts.gstatic.com` `https://content.usage.uipath.com` `https://s.gravatar.com` `https://i1.wp.com`
Azure SignalR	`*.signalr.azure.us`
Telemetry	`https://*.in.applicationinsights.azure.us`
Upload files	`*.blob.core.usgovcloudapi.net`