- Overview
- Data security and compliance
- Organizations
- Tenants
- Licensing
- Accounts and roles
- External applications
- Logging
- Migrating to Automation Cloud™
Configuring the firewall
This page lists the domains used by Automation Cloud and our other cloud services. You can use this information to compile an allow list for UiPath software in the configuration of your company's perimeter network.
In the event that your company restricts access to only allowed websites, you must allow accessing the necessary domains based on the UiPath products you use and the scenarios per product that you use. If you do not allow access to the required domains, Automation Cloud may not function as intended.
|
Scenario |
Domains to Allow |
|---|---|
|
Sign in with basic authentication |
|
|
Sign in with Microsoft |
|
|
Sign in with Google |
|
|
Sign in with LinkedIn |
|
|
Sign in with Azure Active Directory (Azure AD) |
|
|
Sign in with UiPath Assistant (basic email) |
For events related to signing in with basic authentication:
|
|
Sign in with UiPath Studio (basic email) |
For events related to signing in with basic authentication:
|
|
Sign in for the first time / Reset password |
|
|
Issuing the certificate for the site |
|
|
Static assets: Fonts, Styling and CDN hosted scripts |
Fonts:
Images:
CSS:
Scripts:
|
|
Dynamic Feature Enablement |
|
|
Sign in via Auth0 (for EU) |
|
|
Update services |
To configure network connections, use Microsoft documentation. |
For details, refer to the Enabling the firewall for the customer-managed key documentation.
-
20.213.69.140/30
-
20.92.42.116/30
-
20.220.159.8/30
-
20.104.134.160/30
-
20.239.121.152/30
-
20.232.224.12/30
-
20.78.114.120/30
-
104.215.9.124/30
-
20.166.153.132/30
-
20.198.150.140/30
-
20.23.210.168/30
-
20.66.65.144/30
-
20.219.182.96/30
-
52.140.57.140/30
-
20.90.169.148/30
-
51.142.146.56/30
|
Scenario |
Domains to Allow |
|---|---|
|
Authentication |
|
| Navigate to Action Center page |
|
| View/Assign/Un-assign/Delete an Action |
|
| Storage bucket (File upload/download) |
|
|
Module or Scenario |
Domains to Allow |
|---|---|
|
AI Center | |
|
Identity Server |
|
|
PkgManager |
|
|
Deployer |
|
|
Helper |
|
|
Trainer |
|
|
AppManager |
|
|
Upload files |
|
|
Third-party Services | |
|
AppInsights |
|
|
Static Assets |
|
|
Navigate to AI Center | |
|
Permissions |
|
|
OpenId configuration |
|
|
Endpoint Value |
Server Location |
|---|---|
|
|
Nearest geolocation based on the request IP |
|
|
West Europe |
|
|
US |
|
|
Delayed enterprise ring deployment, located in the United States |
|
Scenario |
Domains to Allow |
|---|---|
|
Navigate to Apps |
|
|
Create apps, or create apps via import, or add or delete process |
|
|
Export, clone, share, delete, edit, or publish an app |
|
|
Run or preview an app |
|
|
Click on Processes or Create rule |
|
|
Bind process |
|
|
General or Permission |
|
|
Create or delete a page, or create or delete History |
|
|
Connect to Apps |
|
| Scenario | Domains to Allow |
|---|---|
| Navigate to the Automation Hub page |
|
| Use OpenAPI for Automation Hub |
|
|
Scenario |
Domains to Allow |
|---|---|
|
Navigate to the Automation Ops page |
|
|
Scenario |
Domains to Allow |
|---|---|
|
Admin Portal / Identity Server |
|
| Static assets |
|
| Azure SignalR |
|
| Telemetry |
|
| LaunchDarkly Feature Flags |
|
| Pendo (clickable in-app guides) |
|
| Performance monitoring |
|
|
Scenario |
Domains to Allow |
|---|---|
|
All Data Service operations |
|
|
Fetching static frontend content |
|
|
Sending notifications to notification hub |
|
|
Getting Feature Flag information |
|
|
Collection of telemetry |
|
| Module or Scenario | Domains to Allow |
|---|---|
| Navigate to Document Understanding | https://*.uipath.com |
| Azure | https://*.azure.com |
| Network |
|
| Feature flags | https://*.launchdarkly.com |
| Telemetry | https://*.visualstudio.com |
| Azure SignalR | https://*.service.signalr.net |
| Storage |
|
| Pendo | https://*.pendo.io |
|
Scenario |
Domains to Allow |
|---|---|
|
Navigate to the Insights page |
|
Add the following IP addresses to your allow list to use Integration Service and create connections.
| Region | IPs | Environment |
|---|---|---|
| Europe |
34.247.224.172 108.128.2.184 54.78.70.51 | Production |
| US |
3.225.236.232 18.209.239.173 3.211.174.83 | Production |
| Japan |
18.180.58.90 35.72.149.94 35.75.176.28 | Production |
| Australia |
13.210.116.107 13.54.88.227 13.55.113.75 | Production |
| All |
3.67.182.72 18.156.115.90 52.57.115.254 | Staging |
Robots send traffic to these Automation CloudTM Orchestrator domains. We recommend that you allow them to ensure proper functioning of your automations.
|
Module or Functionality |
Domains to Allow |
|---|---|
|
UiPath Orchestrator |
|
|
Automation Cloud™ Robots - VM |
|
|
Storage |
If using Amazon s3 buckets:
|
|
Package and library feeds (library, tenant processes, and others) |
|
|
Azure SignalR |
|
|
Studio and Robot auto-update functionality |
|
|
Traffic Manager (internal) |
|
We recommend allowing these IPs, which send traffic from Orchestrator towards your resources. For details, see Orchestrator outbound IP addresses.
Community users
|
Region |
CIDR |
IPs |
|---|---|---|
|
Europe (European Union) |
20.123.102.24/30 20.50.147.88/30 |
20.123.102.24 20.123.102.25 20.123.102.26 20.123.102.27 20.50.147.88 20.50.147.89 20.50.147.90 20.50.147.91 |
Enterprise users
|
Region |
CIDR |
IPs |
|---|---|---|
|
Australia |
20.92.156.92/30 |
20.92.156.92 20.92.156.93 20.92.156.94 20.92.156.95 |
|
Canada |
20.116.141.44/30 |
20.116.141.44 20.116.141.45 20.116.141.46 20.116.141.47 |
|
United States |
20.124.53.40/30 20.121.182.72/30 20.121.104.124/30 |
20.124.53.40 20.124.53.41 20.124.53.42 20.124.53.43 20.121.182.72 20.121.182.73 20.121.182.74 20.121.182.75 20.121.104.124 20.121.104.125 20.121.104.126 20.121.104.127 |
|
Japan |
20.210.80.72/30 |
20.210.80.72 20.210.80.73 20.210.80.74 20.210.80.75 |
|
Europe (European Union) |
20.223.90.156/30 20.223.16.0/30 4.207.205.236/30 |
20.223.90.156 20.223.90.157 20.223.90.158 20.223.90.159 20.223.16.0 20.223.16.1 20.223.16.2 20.223.16.3 4.207.205.236 4.207.205.237 4.207.205.238 4.207.205.239 |
|
Singapore |
104.43.98.180/30 |
104.43.98.180 104.43.98.181 104.43.98.182 104.43.98.183 |
|
United Kingdom | 20.90.174.164/30 |
20.90.174.164 20.90.174.165 20.90.174.166 20.90.174.167 |
|
India | 4.224.102.80/30 |
4.224.102.80 4.224.102.81 4.224.102.82 4.224.102.83 |
| Module or Scenario | Domains to Allow |
|---|---|
| Identity Server |
|
| Static assets |
|
| Azure SignalR |
|
| Telemetry |
|
| Upload files |
|
| LaunchDarkly Feature Flags |
|
|
Scenario |
Domains to Allow |
|---|---|
|
Navigate to the Solutions Management page |
|
|
Storage |
|
| Module or Functionality | Domains to Allow |
|---|---|
|
Azure SignalR |
|
|
UiPath products |
|
|
UiPath products (in-app feedback) |
|
|
UiPath products (static assets) |
|
|
UiPath products (telemetry) |
|
|
Third-party services (clickable guides) |
|
|
Third-party services (feature flags provider) |
|
|
Third-party services (storage) |
|
|
Third-party services (telemetry) |
|
|
Third-party services (translations helper) |
|
If your company uses proxies, the below URLs need to be added to the Firewall Exceptions so the Task Mining desktop components connect to our web servers.
|
Component |
URL |
Port |
|---|---|---|
|
Admin Portal |
|
443 |
|
Web Portal |
|
443 |
|
Pendo |
|
443 |
|
Azure App Insights |
|
443 |
| Azure Signalr |
|
443 |
|
Avatars |
|
443 |
- Automation Cloud Portal
- Outbound IPs to enable a firewall for the customer-managed key
- Action Center
- AI Center
- AI Computer Vision
- Apps
- Automation Hub
- Automation Ops
- Communications Mining
- Data Service
- Document Understanding
- Insights
- Integration Service
- Orchestrator
- Domains to add to the allow list
- Outbound IPs to add to the allow list
- Process Mining
- Solutions Management
- Studio Web
- Task Mining
- Test Manager
