# Configuring the firewall for Automation Cloud
> Unified outbound IP ranges for Automation Cloud services, organized by global region as part of the transition away from per-service IP ranges.
This page lists the unified outbound IP ranges for Automation Cloud services. These ranges are organized by global region and cover all services uniformly — you no longer need to maintain separate outbound IP ranges per service.
:::warning
**Transition in progress — action required by September 16, 2026**
As of June 16, 2026, unified outbound IP ranges have been published and must be added to your allowlist alongside the legacy per-service IP ranges. Starting September 16, 2026, the legacy IP ranges will be gradually phased out.
**Until September 16, 2026**: You must allowlist **both** the legacy per-service IP ranges and the unified IP ranges on this page simultaneously.
**After September 16, 2026**: Continue allowlisting both the legacy and unified IP ranges until a subsequent release note confirms the legacy IP ranges can be safely removed.
If you are still using the legacy per-service IP ranges, you can find them on the [Legacy - Configuring the firewall for Automation Cloud](https://docs.uipath.com/automation-cloud/automation-cloud/latest/admin-guide/configuring-the-firewall-for-cloud-legacy) page.
:::
## Overview
UiPath services require two types of allow lists, determined by who initiates the connection:
* **DNS domain allowlist (FQDNs)**: Apply when users, robots, or on-premises components connect to UiPath. These domains must always be allow listed by FQDN because their underlying infrastructure is distributed.
* **Outbound IP ranges (CIDRs)**: Apply when UiPath connects to your systems — for example, when Integration Service calls your endpoints, or Orchestrator connects to your on-premises resources. To allow this traffic, you must allow the corresponding CIDR blocks.
**What changed**: Previously, outbound IP ranges differed per service and per region. The new model unifies these into a single set of outbound IP ranges per global region. All affected services share the same outbound IP ranges within a region. For example, in the European Union region, a single set of IP ranges covers Automation Cloud Portal, Orchestrator, Integration Service, Apps, Automation Ops, Test Manager, AI Trust Layer, and Notification Service simultaneously.
**Exceptions**: The following services retain their own service-specific outbound IP ranges and are not covered by the unified table: Insights, IXP, and Automation Cloud Robots - Serverless. For their outbound IP ranges, see [Service exceptions](#service-exceptions).
## How to use this page
To configure your firewall for unified outbound IP ranges:
1. Identify the global region of your UiPath tenant and the region of your organization. Some UiPath service features inherit the organization's region rather than the tenant's region. If they differ, you must allowlist the IP ranges for both. For more information on organization-level and tenant-level services, see [Global cloud regions](https://docs.uipath.com/automation-cloud/automation-cloud/latest/admin-guide/global-cloud-regions). If your tenant or organization migrates to another region, update outbound IP ranges accordingly.
2. Locate your region in the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table.
3. Add all CIDR ranges listed for your region to your firewall's outbound allow list.
4. For services with service-specific outbound IP ranges (Insights, IXP, Serverless), see [Service exceptions](#service-exceptions).
5. For domain allow lists and inbound IP ranges, see the relevant service sections on this page.
## Unified outbound IP ranges
The following table lists the unified outbound IP ranges by global region. All affected services share these ranges within a region.
Region
Outbound IP ranges
Australia
13.70.108.108/30
13.70.108.160/30
13.70.108.164/30
13.70.108.64/30
13.75.193.112/30
13.75.193.208/30
13.75.193.248/30
13.75.193.84/30
23.101.208.196/30
23.101.220.128/30
13.77.40.228/30
13.77.46.56/30
23.101.228.108/30
23.101.228.56/30
23.101.232.52/30
23.101.238.168/30
23.101.239.20/30
23.101.239.88/30
Canada
20.151.112.252/30
20.151.113.120/30
20.220.216.100/30
20.220.216.172/30
20.220.216.176/30
20.220.216.48/30
20.63.33.124/30
20.63.33.40/30
20.63.33.48/30
20.63.33.72/30
20.63.56.64/30
20.63.56.68/30
40.86.219.188/30
40.86.219.8/30
40.86.221.132/30
40.86.224.148/30
40.86.224.16/30
40.86.226.24/30
40.86.231.156/30
40.86.231.164/30
Community (Europe)
168.63.56.100/30
168.63.58.240/30
40.112.90.48/30
40.112.95.4/30
40.112.95.52/30
40.112.95.92/30
94.245.89.240/30
94.245.92.36/30
94.245.93.132/30
94.245.93.148/30
20.101.116.56/30
20.101.117.36/30
20.67.88.116/30
20.67.88.132/30
20.71.24.128/30
20.71.24.32/30
40.114.192.252/30
40.114.198.164/30
40.114.198.96/30
40.114.199.172/30
European Union
168.63.58.108/30
168.63.58.144/30
40.112.92.188/30
40.112.92.204/30
40.112.93.192/30
40.112.93.208/30
94.245.89.172/30
94.245.89.180/30
94.245.89.208/30
94.245.89.4/30
94.245.89.68/30
94.245.93.8/30
20.101.114.72/30
20.101.115.224/30
20.101.90.56/30
20.101.91.8/30
20.67.88.112/30
20.67.88.64/30
40.114.193.88/30
40.114.196.252/30
40.114.197.0/30
40.114.197.220/30
European Union (GxP)
168.63.56.128/30
168.63.56.212/30
40.112.88.128/30
40.112.90.76/30
40.112.90.80/30
40.112.91.84/30
94.245.92.148/30
94.245.92.208/30
94.245.93.164/30
94.245.93.196/30
20.101.117.40/30
20.101.117.64/30
20.67.88.148/30
20.67.88.164/30
40.114.194.12/30
40.114.194.40/30
40.114.199.4/30
40.114.199.96/30
20.79.201.136/30
20.79.201.176/30
India
104.211.88.192/30
104.211.88.196/30
104.211.88.56/30
104.211.89.48/30
104.211.92.4/30
104.211.95.48/30
20.198.0.108/30
20.198.0.72/30
20.198.0.8/30
20.198.0.96/30
40.80.89.112/30
40.80.89.132/30
40.80.89.136/30
40.80.89.64/30
104.211.216.236/30
104.211.216.80/30
104.211.218.152/30
104.211.218.32/30
104.211.218.48/30
104.211.218.92/30
104.211.222.120/30
104.211.222.28/30
20.219.104.140/30
20.219.104.180/30
20.219.104.236/30
20.219.104.244/30
Japan
20.210.232.136/30
20.210.232.228/30
20.210.233.24/30
20.210.233.32/30
20.46.112.236/30
20.46.113.0/30
20.89.104.152/30
20.89.104.200/30
52.253.104.184/30
52.253.105.76/30
104.46.228.24/30
104.46.228.96/30
20.89.232.196/30
20.89.233.104/30
20.89.233.224/30
20.89.235.204/30
40.74.64.240/30
40.74.65.80/30
Singapore
104.215.184.68/30
104.215.185.96/30
13.67.48.140/30
13.67.50.0/30
13.67.52.0/30
13.67.54.52/30
13.67.55.76/30
13.67.55.8/30
52.230.32.132/30
52.230.32.188/30
South Korea
20.214.146.112/30
52.141.21.12/30
Switzerland
20.203.128.104/30
20.203.128.200/30
51.107.68.220/30
51.107.68.232/30
20.199.240.20/30
20.199.240.8/30
United Arab Emirates
40.123.215.148/30
40.123.215.168/30
20.45.67.20/30
20.45.67.8/30
United Kingdom
20.90.186.140/30
20.90.187.100/30
20.90.187.8/30
20.90.187.80/30
20.90.248.92/30
20.90.249.104/30
20.90.249.16/30
20.90.249.92/30
20.90.81.12/30
20.90.81.60/30
51.104.16.124/30
51.104.16.168/30
51.140.5.96/30
51.140.6.156/30
51.140.200.128/30
51.140.200.208/30
51.140.204.72/30
51.140.205.136/30
51.140.205.20/30
51.140.205.248/30
51.140.206.232/30
51.140.241.148/30
51.141.113.112/30
51.141.113.132/30
51.141.113.168/30
51.141.114.4/30
United States
104.211.25.200/30
104.211.29.132/30
104.211.58.236/30
104.211.63.160/30
168.61.34.236/30
168.61.35.124/30
168.62.53.116/30
168.62.53.96/30
40.114.108.220/30
40.114.108.32/30
52.152.132.116/30
52.152.133.144/30
104.42.72.100/30
104.42.72.196/30
104.42.76.156/30
104.42.79.56/30
13.66.155.116/30
13.66.157.120/30
13.66.157.192/30
13.66.157.200/30
13.66.160.84/30
13.66.160.96/30
13.66.163.204/30
13.66.167.148/30
13.66.167.164/30
13.66.167.4/30
United States (GxP)
104.211.56.184/30
168.61.35.156/30
168.61.35.184/30
168.61.35.196/30
168.61.35.252/30
40.114.109.36/30
40.114.109.64/30
40.114.71.160/30
52.152.129.212/30
52.152.135.176/30
104.42.73.204/30
104.42.73.220/30
104.42.76.196/30
104.42.77.96/30
13.66.160.164/30
13.66.160.28/30
13.66.161.20/30
13.66.163.104/30
13.66.164.20/30
13.66.166.60/30
## Service exceptions
The following services retain their own service-specific outbound IP ranges. These are not covered by the unified table and must be configured separately. Their outbound IP ranges are not changing.
### Insights
Outbound IP ranges allow you to add a list of IPs for Log Export and Data Export features to the allowlist and not open your network to all external IPs. If the Blob storage regions correspond to the respective Insights service region, you cannot use public IPs.
Table 2. Insights Outbound static IP
ranges
Insights service region
Blob storage region
Functionality
Outbound static IP ranges
Europe
North Europe
West Europe
Log Export
4.209.242.155
52.158.117.70
48.209.163.160
132.220.192.40
Data Export
48.209.165.211
4.209.26.11
Looker SFTP notifications
34.159.94.48
34.159.97.39
34.89.186.9
United States of America
North Europe
West Europe
East US
West US
Log Export
4.209.242.155
134.33.227.198
134.33.128.26
Data Export
4.156.106.136
134.33.152.158
Looker SFTP notifications
34.145.223.13
34.150.213.234
35.186.171.220
Australia
North Europe
Australia East
West Europe
Australia Southeast
Log Export
4.209.242.155
4.254.65.248
Data Export
4.237.200.13
4.237.193.83
Looker SFTP notifications
34.151.78.48
34.116.85.140
34.87.195.36
35.189.54.47
Japan
North Europe
Japan East
West Europe
Japan West
Log Export
4.209.242.155
135.149.20.42
Data Export
74.176.138.15
135.149.17.81
Looker SFTP notifications
34.84.4.218
34.146.68.203
34.85.3.198
Canada
North Europe
Canada Central
West Europe
Canada East
Log Export
4.209.242.155
4.174.211.111
Data Export
130.107.208.253
130.107.10.82
Looker SFTP notifications
34.152.60.210
35.203.46.255
35.234.253.103
35.203.16.100
Singapore
North Europe
Southeast Asia
West Europe
East Asia
Log Export
4.209.242.155
57.158.137.134
Data Export
20.247.146.89
57.158.190.211
Looker SFTP notifications
34.87.134.202
34.143.132.206
34.143.210.116
35.185.184.54
India
North Europe
Central India
West Europe
South India
Log Export
4.209.242.155
98.70.224.34
Data Export
135.235.177.71
135.235.249.14
Looker SFTP notifications
35.200.158.11
34.100.209.232
34.93.170.82
United Kingdom
North Europe
UK South
West Europe
UK West
Log Export
4.209.242.155
131.145.43.57
Data Export
74.177.240.23
85.210.75.139
Looker SFTP notifications
34.147.209.63
35.197.212.7
34.142.53.66
GXP United States of America
East US
West US
Log Export
134.33.240.104
Data Export
51.8.242.246
134.33.200.238
Looker SFTP notifications
35.221.62.218
34.86.34.135
35.236.240.168
GXP Europe
North Europe
East US
West Europe
West US
Log Export
134.33.240.104
52.158.122.175
Data Export
52.158.126.222
20.13.193.184
Looker SFTP notifications
34.90.52.191
35.204.216.7
35.204.118.28
Switzerland
Switzerland North
North Europe
West Europe
Switzerland West
Log Export
4.209.242.155
20.208.76.154
Data Export
20.250.215.68
20.208.77.215
United Arab Emirates
UAE North
North Europe
West Europe
UAE Central
Log Export
4.209.242.155
20.203.81.1
Data Export
40.120.125.140
20.203.82.124
South Korea
Korea Central
North Europe
West Europe
Korea South
Log Export
4.209.242.155
20.249.48.172
Data Export
20.249.44.68
20.249.116.67
#### Limitations
For Log Export, Google Storage does not support inbound IP restriction.
Due to a limitation on Microsoft side for Log Export, you cannot set up inbound IP restriction when your Azure blob storage account and the Insights infrastructure is under the same region in Azure. Because of this, you cannot use the following regions for blob storage account based on the Insights service region:
* Insights US: North Europe, East US
* Insights Europe: North Europe, West Europe (For Community Licensing)
* Insights UK: North Europe, UK South
* Insights Canada: North Europe, Canada Central
* Insights Singapore: North Europe, Southeast Asia
* Insights India: North Europe, Central India
* Insights Australia: North Europe, Australia East
* Insights Japan: North Europe, Japan East
* Insights GXP Europe: North Europe, East US
* Insights GXP US: East US
For more information on this limitation, check the [Restrictions for IP network rules](https://learn.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal#restrictions-for-ip-network-rules) page from the Microsoft Azure Blob Storage documentation.
### IXP
Allow the following outbound IP ranges for IXP to sync emails from your Exchange. For details, check the [Overview Exchange integration](https://docs.uipath.com/communications-mining/automation-cloud/latest/developer-guide/overview-exchange-integration).
Region
Outbound IP ranges
Europe
35.204.220.118
US
34.71.173.219
Japan
34.84.107.92
Australia
34.87.223.173
Canada
34.152.42.160
Singapore
34.143.128.81
### Automation Cloud Robots - Serverless
Outbound IP ranges for Automation Cloud Robots - Serverless enable you to route outbound network traffic through a dedicated, static IP address ranges managed by UiPath. This allows you to whitelist or securely integrate with external systems that restrict incoming connections to known IPs.
#### Configuration
You can enable static outbound IP ranges while [creating the Serverless template](https://docs.uipath.com/orchestrator/automation-cloud/latest/user-guide/executing-unattended-automations-with-serverless-robots#step-2-adding-serverless-robots-to-your-tenant) and going to the **Network Configuration** page.
#### Availability
The outbound IP ranges can sometimes change as a result of infrastructure deployments. To help keep you on top of any changes, we have compiled a list of up-to-date static outbound IP ranges, in the following tables.
#### Community Users
Region
CIDR
Outbound IP ranges
Europe
20.191.43.0/30
20.191.42.240/30
20.191.43.0
20.191.43.1
20.191.43.2
20.191.43.3
20.191.42.240
20.191.42.241
20.191.42.242
20.191.42.243
#### Enterprise Users
Region
CIDR
Outbound IP ranges
Australia
20.53.170.116/30
20.53.170.208/30
20.53.170.116
20.53.170.117
20.53.170.118
20.53.170.119
20.53.170.208
20.53.170.209
20.53.170.210
20.53.170.211
United States
20.102.5.168/30
20.102.0.76/30
172.202.61.224/30 *
20.15.227.248/30 *
20.102.5.168
20.102.5.169
20.102.5.170
20.102.5.171
20.102.0.76
20.102.0.77
20.102.0.78
20.102.0.79
172.202.61.224 *
172.202.61.225 *
172.202.61.226 *
172.202.61.227 *
20.15.227.248 *
20.15.227.249 *
20.15.227.250 *
20.15.227.251 *
Japan
20.44.188.168/30
20.44.185.192/30
20.44.188.168
20.44.188.169
20.44.188.170
20.44.188.171
20.44.185.192
20.44.185.193
20.44.185.194
20.44.185.195
Europe (European Union)
20.191.46.104/30
20.191.43.60/30
20.191.46.104
20.191.46.105
20.191.46.106
20.191.46.107
20.191.43.60
20.191.43.61
20.191.43.62
20.191.43.63
Canada
20.104.85.156/30
4.204.246.196/30
20.104.85.156
20.104.85.157
20.104.85.158
20.104.85.159
4.204.246.196
4.204.246.197
4.204.246.198
4.204.246.199
Singapore
20.6.92.60/30
13.67.52.224/30
20.6.92.60
20.6.92.61
20.6.92.62
20.6.92.63
13.67.52.224
13.67.52.225
13.67.52.226
13.67.52.227
United Arab Emirates
40.119.161.100/30
20.216.33.124/30
40.119.161.100
40.119.161.101
40.119.161.102
40.119.161.103
20.216.33.124
20.216.33.125
20.216.33.126
20.216.33.127
United Kingdom
20.117.141.240/30
20.117.141.244/30
20.117.141.240
20.117.141.241
20.117.141.242
20.117.141.243
20.117.141.244
20.117.141.245
20.117.141.246
20.117.141.247
India
135.235.152.128/30
20.204.109.132/30
135.235.152.128
135.235.152.129
135.235.152.130
135.235.152.131
20.204.109.132
20.204.109.133
20.204.109.134
20.204.109.135
* Added on February 18th, 2026.
## Automation Cloud Portal
Allow these domains used by Automation Cloud Portal:
:::important
If you use Azure buckets, they must not be located in the tenant's region or in the failover region.
:::
### Domains
| Scenario | Domains |
| --- | --- |
| Sign in with basic authentication | `https://account.uipath.com``https://cloud.uipath.com``https://platform-cdn.uipath.com` |
| Sign in with Microsoft | `https://aadcdn.msftauth.net``https://account.uipath.com``https://cloud.uipath.com``https://login.live.com``https://login.microsoftonline.com``https://platform-cdn.uipath.com` |
| Sign in with Google | `https://account.uipath.com``https://cloud.uipath.com``https://accounts.google.com``https://google.com``https://lh3.googleusercontent.com``https://platform-cdn.uipath.com``https://www.gstatic.com` |
| Sign in with LinkedIn | `https://account.uipath.com``https://cloud.uipath.com``https://lnkd.demdex.net``https://platform-cdn.uipath.com``https://platform.linkedin.com``https://static-exp1.licdn.com``https://www.linkedin.com` |
| Sign in with Azure Active Directory (Azure AD) | `https://aadcdn.msftauth.net``https://cloud.uipath.com``https://login.microsoftonline.com` |
| Sign in with UiPath Assistant (basic email) | `https://*.service.signalr.net``wss://*.service.signalr.net` For events related to signing in with basic authentication: `https://account.uipath.com``https://cloud.uipath.com``https://platform-cdn.uipath.com` |
| Sign in with UiPath Studio (basic email) | `https://api.nuget.org``https://*.service.signalr.net``wss://*.service.signalr.net``https://gallery.uipath.com``https://pkgs.dev.azure.com` For events related to signing in with basic authentication: `https://account.uipath.com``https://cloud.uipath.com``https://platform-cdn.uipath.com` |
| Sign in for the first time / Reset password | `uipath.eu.auth0.com``account.uipath.com` |
| Static assets: Fonts, Styling and CDN hosted scripts | Fonts: `https://use.typekit.net``https://fonts.gstatic.com``https://platform-cdn.uipath.com`Images: `https://s.gravatar.com``https://secure.gravatar.com``https://*.wp.com``https://*.googleusercontent.com``https://i.ytimg.com``https://platform-cdn.uipath.com`CSS: `https://fonts.googleapis.com/css``https://use.typekit.net``https://p.typekit.net``https://platform-cdn.uipath.com`Scripts: `https://primer.typekit.net``https://use.typekit.net``https://platform-cdn.uipath.com` |
| Sign in via Auth0 (for EU) | `uipath.eu.auth0.com` |
| Update services | `ctldl.windowsupdate.com` To configure network connections, use [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus#21-configure-network-connections). |
| Download Autopilot for Everyone from the AI Trust Layer admin section | `https://autopilot-prd.azureedge.net` |
### Outbound IPs for notifications
Notification Service outbound IP ranges are part of the unified outbound IP ranges. Refer to the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table on this page and allowlist all CIDRs for your region.
### Relay
Allow these domains used by the Relay client to establish connectivity to Automation Cloud:
| Purpose | Domains | Protocol | Port |
| --- | --- | --- | --- |
| Authentication and relay registration | `cloud.uipath.com` | HTTPS | 443 |
| Relay server - US region | `us-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
| Relay server - EU region | `eu-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
| Relay server - Canada region | `ca-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
| Relay server - Switzerland region | `ch-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
| Relay server - Australia region | `au-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
| Relay server - Singapore region | `sg-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
| Relay server - Japan region | `jp-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
| Relay server - South Korea region | `kr-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
| Relay server - UAE region | `ae-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
| Relay server - UK region | `uk-relay.uipath.com` | TCP (TLS passthrough required) | 443 |
## Action Center
### Domains
The following table lists the domains used by Action Center that we recommend allowing, based on the functionality you plan to use:
The following table lists the domains used by Action Center that we recommend allowing, based on the functionality you plan to use:
| Scenario | Domains to Allow |
| --- | --- |
| Authentication | `https://cloud.uipath.com``https://account.uipath.com/``https://lh3.googleusercontent.com/` |
| Navigate to Action Center page | `https://cloud.uipath.com``https://uipath-acc-prod.azureedge.net/``https://www.youtube.com/``https://platform-cdn.uipath.com/``https://fonts.gstatic.com/``*.googleapis.com` |
| View/Assign/Un-assign/Delete an Action | `https://cloud.uipath.com``https://api.smartling.com/``https://uipath-acc-prod.azureedge.net/``*.cloudfront.net``https://platform-cdn.uipath.com/``https://fonts.gstatic.com/``*.googleapis.com` |
| Storage bucket (File upload/download) | `*.blob.core.windows.net` |
## AI Center
### Domains
The following table lists the domains used by AI Center:
Module or Scenario
Domains to Allow
AI Center
Identity Server
https://cloud.uipath.com
PkgManager
https://cloud.uipath.com
Deployer
https://cloud.uipath.com
Helper
https://cloud.uipath.com
Trainer
https://cloud.uipath.com
AppManager
https://cloud.uipath.com
Upload files
Australia: https://aifproddataauetraining.blob.core.windows.net Canada: https://aifproddatacactraining.blob.core.windows.net Europe: https://aifproddatawetraining.blob.core.windows.net Japan: https://aifproddatajaetraining.blob.core.windows.net Singapore: https://aifproddataseatraining.blob.core.windows.net USA: https://aifproddataeustraining.blob.core.windows.net GXP: https://aifgxpdatawetraining.blob.core.windows.net
Third-party Services
AppInsights
https://bam.eu01.nr-data.nethttps://eastus-6.in.applicationinsights.azure.com/
Static Assets
https://aifprodassets.azureedge.nethttps://i2.wp.com/cdn.auth0.comhttps://api.smartling.comhttps://s.gravatar.comhttps://js-agent.newrelic.comhttps://fonts.gstatic.comhttps://use.typekit.nethttps://fonts.googleapis.comhttps://d2c7xlmseob604.cloudfront.nethttps://du-prod-cdn.azureedge.net/https://aifprodassets.azureedge.net/
Navigate to AI Center
Permissions
https://cloud.uipath.com
OpenId configuration
https://cloud.uipath.comhttps://dc.services.visualstudio.comhttps://d2c7xlmseob604.cloudfront.nethttps://use.typekit.nethttps://fonts.googleapis.comhttps://aifstgassets.azureedge.nethttps://p.typekit.nethttps://fonts.gstatic.comhttps://api.smartling.comhttps://js-agent.newrelic.comhttps://i2.wp.com/cdn.auth0.comhttps://bam.eu01.nr-data.nethttps://du-prod-du-eus-signalr.service.signalr.net/wss://du-prod-du-eus-signalr.service.signalr.net/
## AI Computer Vision
The following table lists the endpoint values and server locations used by AI Computer Vision:
The following table lists the endpoint values and server locations used by AI Computer Vision:
| Endpoint Value | Server Location |
| --- | --- |
| `https://cv.uipath.com` | Nearest geolocation based on the request IP |
| `https://cv-eu.uipath.com` | West Europe |
| `https://cv-us.uipath.com` | US |
| `https://cv-delayed.uipath.com` | [Delayed enterprise ring deployment](https://docs.uipath.com/ai-computer-vision/automation-cloud/latest/user-guide/delayed-enterprise-ring-deployment), located in the United States |
## AI Trust Layer – Bring your own LLM
### Outbound IP ranges
The outbound IP ranges for AI Trust Layer – Bring your own LLM are part of the unified outbound IP ranges. Refer to the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table on this page and allowlist all CIDRs for your region.
## Apps
### Domains
The following table lists the domains used by Apps that you need to allow:
| Scenario | Domains to Allow |
| --- | --- |
| Navigate to Apps | `https://cloud.uipath.com``https://fonts.googleapis.com``https://cdnjs.cloudflare.com``https://uipath-apps-prd.azureedge.net``https://fonts.gstatic.com``https://dc.services.visualstudio.com``https://.uipath.host` |
| Create apps, or create apps via import, or add or delete process | `https://cloud.uipath.com``https://uipath-apps-prd.azureedge.net` |
| Export, clone, share, delete, edit, or publish an app | `https://cloud.uipath.com` |
| Run or preview an app | `https://cloud.uipath.com``https://fonts.googleapis.com``https://cdnjs.cloudflare.com``https://uipath-apps-prd.azureedge.net``https://fonts.gstatic.com``https://dc.services.visualstudio.com``https://.uipath.host``https://api.uipath.com` |
| Select on Processes or Create rule | `https://uipath-apps-prd.azureedge.net` |
| Bind process | `https://uipath-apps-prd.azureedge.net``https://cloud.uipath.com``https://dc.services.visualstudio.com` |
| General or Permission | `https://api.smartling.com` |
| Create or delete a page, or create or delete History | `https://cloud.uipath.com``https://api.smartling.com` |
| Connect to Apps | `*.trafficmanager.net``wss://*.uipath.systems``wss://cloud.uipath.com` |
### Outbound IP ranges
The outbound IP ranges for Apps are part of the unified outbound IP ranges. Refer to the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table on this page and allowlist all CIDRs for your region.
### Content types to add to the allow list
UiPath Apps utilizes the content types `application/octet-stream` and `application/zip` for downloading specific DLL files required to run and preview created applications. It is important to ensure the following content types are allowed within your network settings to avoid interruptions in app functionality:
```
application/zip
application/octet-stream
application/json
text/html
application/javascript
text/css
font/woff2
image/vnd.microsoft.icon
image/svg+xml
image/bmp
image/jpeg
image/png
image/gif
```
#### Key Considerations
Apps are developed using Blazor technology, which processes assemblies directly in the browser. If restrictions for the required content types cannot be lifted within your network, Apps may not function as expected, as there are currently no alternative solutions to bypass these limitations.
#### Apps in Studio Web as an alternative
Apps in Studio Web are designed with a different architecture, that does not require downloading DLL files. If network restrictions prevent the use of Standalone Apps, consider adopting Apps in Studio Web (RPA Apps). This architecture eliminates dependency on restricted content types, ensuring smoother compatibility in restricted network environments.
## Automation Hub
### Domains
The following table lists the domains used by Automation Hub:
The following table lists the domains used by Automation Hub:
| Scenario | Domains to Allow |
| --- | --- |
| Navigate to the Automation Hub page | `https://cloud.uipath.com``http://*.userpilot.io``https://dc.services.visualstudio.com``https://ah-prod-ts-blue-eu.uipath.com``https://ah-prod-ts-blue-us.uipath.com``https://ah-prod-ts-blue-ja.uipath.com``https://ah-prod-ts-blue-au.uipath.com``https://ah-prod-ts-blue-ca.uipath.com``https://ah-prod-ts-blue-sea.uipath.com``https://ah-prod-ts-blue-uk.uipath.com``https://ah-prod-ts-blue-in.uipath.com``https://ah-gxp-ts-blue-us.uipath.com` |
| Use OpenAPI for Automation Hub | `https://automation-hub.uipath.com``http://ah-gxp-openapi-us.uipath.com` |
## Automation Ops
### Domains
The following table lists the domains used by Automation Ops:
| Scenario | Domains to Allow |
| --- | --- |
| Navigate to the Automation Ops page | `https://stdadmstgcdn.azureedge.net``https://app.vssps.visualstudio.com``https://stdadmstgcdn.blob.core.windows.net``https://nexus.ensighten.com``https://cloud.uipath.com``https://platform-cdn.uipath.com``https://use.typekit.net``https://p.typekit.net``https://content.usage.uipath.com``https://dc.services.visualstudio.com``https://data.usage.uipath.com``https://*.service.signalr.net``wss://*.service.signalr.net``https://s.gravatar.com``https://i2.wp.com``https://github.com``https://github.githubassets.com``https://avatars.githubusercontent.com``https://collector.github.com``https://api.github.com` |
### Outbound IP ranges
The outbound IP ranges for Automation Ops are part of the unified outbound IP ranges. Refer to the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table on this page and allowlist all CIDRs for your region.
## Data Fabric
### Domains
The following table lists the domains used by Data Fabric:
| Scenario | Domains to Allow |
| --- | --- |
| All Data Fabric operations | `https://cloud.uipath.com` |
| Fetching static frontend content | `*.cloudapp.azure.com` |
| Sending notifications to notification hub | `https://*.service.signalr.net``wss://*.service.signalr.net` |
| Collection of telemetry | `*.visualstudio.com` |
## Document Understanding
### Domains
The following table lists the domains used by Document Understanding:
| Module or Scenario | Domains to Allow |
| --- | --- |
| Navigate to Document Understanding | `https://*.uipath.com` |
| Azure | `https://*.azure.com` |
| Network | `https://*.azureedge.net``https://*.azurefd.net` |
| Telemetry | `https://*.visualstudio.com` |
| Azure SignalR | `https://*.service.signalr.net``wss://*.service.signalr.net` |
| Storage | `https://*.trafficmanager.net``https://*.blob.core.windows.net` |
| Pendo | `https://*.pendo.io` |
| Public endpoints | Check the [Public endpoints](https://docs.uipath.com/document-understanding/automation-cloud/latest/user-guide/public-endpoints) page for the full list of public endpoints URLs. |
## Insights
### Domains
The following table lists the domains used by Insights:
| Scenario | Domains to Allow |
| --- | --- |
| Navigate to the Insights page | `https://cloud.uipath.com``https://*.lookercdn.com``https://uipath-insights-statics.azureedge.net/``https://*.looker.uipath.com/` |
## Integration Service
### Outbound IP ranges
The outbound IP ranges for Integration Service are part of the unified outbound IP ranges. Refer to the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table on this page and allowlist all CIDRs for your region.
## IXP
### Domains
The following table lists the domains that IXP uses:
| Scenario | Domains to Allow |
| --- | --- |
| Admin Portal / Identity Server | `https://cloud.uipath.com` |
| Static assets | `https://fonts.googleapis.com``https://fonts.gstatic.com` |
| Azure SignalR | `*.service.signalr.net` |
| Telemetry | `https://*.in.applicationinsights.azure.com``https://dc.services.visualstudio.com` |
| Pendo (clickable in-app guides) | `https://*.pendo.io` |
| Performance monitoring | `https://o486811.ingest.sentry.io` |
### Inbound IP ranges
:::note
This section applies only to legacy Re:infer customers.
:::
Add the following inbound IP ranges to your allow list to use IXP and create connections:
Region
Inbound IP ranges
Europe
34.91.100.206
US
34.69.242.10
20.62.244.78
Japan
34.84.144.176
Australia
35.189.46.91
Canada
34.152.10.176
Singapore
35.240.179.214
## Orchestrator
### Domains
Robots send traffic to these Automation Cloud Orchestrator domains. We recommend that you allow these domains to ensure proper functioning of your automations, as described in the following table:
| Module or Functionality | Domains to Allow |
| --- | --- |
| UiPath Orchestrator | `https://cloud.uipath.com``https://orch-cdn.uipath.com``https://account.uipath.com` |
| Automation Cloud Robots - VM | `https://cloud.uipath.com``https://download.uipath.com` |
| Storage | `*.blob.core.windows.net` If using Amazon s3 buckets: `*.s3.amazonaws.com` |
| Package and library feeds (library, tenant processes, and others) | `https://pkgs.dev.azure.com` |
| Azure SignalR | `https://*.service.signalr.net``wss://*.service.signalr.net` |
| Studio and Robot auto-update functionality | `https://download.uipath.com` |
| Live streaming | `*.uipath.com``https://*.uipath.com``wss://*.uipath.com` |
### Outbound IP ranges
The outbound IP ranges for Orchestrator are part of the unified outbound IP ranges. Refer to the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table on this page and allowlist all CIDRs for your region.
## Process Mining
### Domains
The following table lists the domains used by Process Mining:
| Module or Scenario | Domains to Allow |
| --- | --- |
| Identity Server | `https://cloud.uipath.com` |
| Static assets | `https://fonts.googleapis.com``https://fonts.gstatic.com``https://content.usage.uipath.com``https://s.gravatar.com``https://i1.wp.com` |
| Azure SignalR | `https://*.service.signalr.net``wss://*.service.signalr.net` |
| Telemetry | `https://*.in.applicationinsights.azure.com` |
| Upload files | `*.blob.core.windows.net` |
## Solutions
### Domains
The following table lists the domains used by Solutions:
| Scenario | Domains to Allow |
| --- | --- |
| Navigate to the Solutions Management page | `https://cloud.uipath.com``https://fonts.googleapis.com``https://fonts.gstatic.com``https://dc.services.visualstudio.com``api.smartling.com``use.typekit.net``p.typekit.net``s.gravatar.com``i2.wp.com``https://platform-cdn.uipath.com``https://sol-cdn.uipath.com``https://solutions.uipath.com` |
| Storage | `*.blob.core.windows.net` |
| Azure SignalR | `https://*.service.signalr.net``wss://*.service.signalr.net` |
## Studio Web
### Domains
The following table lists the domains used by Studio Web:
| Module or Functionality | Domains to Allow |
| --- | --- |
| Azure SignalR | `wss://*.service.signalr.net``https://*.service.signalr.net``wss://*.trafficmanager.net` |
| UiPath products | `https://*.uipath.com` |
| UiPath products (in-app feedback) | `https://studio-feedback.azure-api.net` |
| UiPath products (static assets) | `https://platform-cdn.uipath.com``https://content.usage.uipath.com``https://fonts.gstatic.com``https://d2c7xlmseob604.cloudfront.net``https://fonts.googleapis.com/``https://*.typekit.net``https://fonts.gstatic.com``https://s.gravatar.com``https://secure.gravatar.com``https://*.wp.com``https://*.googleusercontent.com``https://i.ytimg.com` |
| UiPath products (telemetry) | `https://data.usage.uipath.com` |
| Third-party services (clickable guides) | `https://*.pendo.io` |
| Third-party services (storage) | `https://*.blob.core.windows.net``https://*.amazonaws.com` |
| Third-party services (telemetry) | `https://dc.services.visualstudio.com` |
| Third-party services (translations helper) | `https://api.smartling.com` |
## Task Mining
### Domains
If your company uses proxies, the URLs, described in the following table, need to be added to the Firewall Exceptions so the Task Mining desktop components connect to our web servers.
:::note
The Task Mining Desktop application uses web sockets for real-time communication with the server (telemetry and governance). For the URLs and IPs to be allowed, the transparent proxy is expected to have the HTTPS and WSS protocols enabled.
:::
Component
URL
Port
Admin Portal
https://cloud.uipath.com
443
Web Portal
*.blob.core.windows.net
443
Pendo
https://content.usage.uipath.com
443
Azure App Insights
dc.services.visualstudio.comdc.applicationinsights.azure.comdc.applicationinsights.microsoft.comdc.services.visualstudio.com*.in.applicationinsights.azure.comlive.applicationinsights.azure.comrt.applicationinsights.microsoft.comrt.services.visualstudio.com{region}.livediagnostics.monitor.azure.com
443
Azure Signalr
https://*.service.signalr.netwss://*.service.signalr.net
443
Avatars
i2.wp.com/cdn.auth0.com/avatars
443
## Test Manager
This section lists the domains used by Test Manager and the outbound IP ranges that you should consider allowing if you want to use various Test Manager capabilities.
### Domains
The following table lists the domains used by Test Manager that we recommend allowing, based on the functionality you plan to use:
| Module or functionality | Domains to allow |
| --- | --- |
| UiPath Test Manager | `https://cloud.uipath.com` |
| Azure SignalR | `https://*.service.signalr.net``wss://*.service.signalr.net` |
### SAP Heatmap and CIA RFC Outbound IPs
The outbound IP ranges for Test Manager SAP Heatmap and CIA RFC connections are part of the unified outbound IP ranges. Refer to the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table on this page and allowlist all CIDRs for your region.
### SAP Heatmap and CIA Web Service Outbound IPs
The outbound IP ranges for Test Manager SAP Heatmap and CIA Web Service connections are part of the unified outbound IP ranges. Refer to the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table on this page and allowlist all CIDRs for your region.
### Outbound IP ranges for connectors
The outbound IP ranges for Test Manager connectors are part of the unified outbound IP ranges. Refer to the [Unified outbound IP ranges](#unified-outbound-ip-ranges) table on this page and allowlist all CIDRs for your region.