# Services the Robot Connects to

> External services UiPath Robot connects to during workflow execution, including licensing, package download, and certificate verification endpoints.

## About

During the workflow execution, the Robot connects to different services to download required automation packages, check licenses, verify certificates, and more. Denying access to any of these services can result in operation discrepancies, or even failure. The connection is established in the following cases:

* The Robot validates license details on the machine it is installed on and shares only license-related information with the licensing server.
* The Robot downloads the required automation packages.

## Outbound Connections

 <colgroup>
  <col/>
  <col/>
  <col/>
  <col/>
  <col/>
 </colgroup>
 
  
     Hostname  
     Protocol  
     Port  
     Application  
     Comments  
  
 
 
  
    <code>cloud.uipath.com</code> 
     TCP  
     443  
     https  
     For Automation Cloud Orchestrator.  
  
  
    <code>download.uipath.com</code> 
     TCP  
     443  
     https  
     To download Studio or Robot MSI installers during automatic updates.  
  
  
    <code>pkgs.dev.azure.com</code><code>uipathpackages.myget.org</code> 
     TCP  
     443  
     https  
     The Robot downloads the required activity packages.  
  
  
    <code>*.vo.msecnd.net</code> 
     TCP  
     443  
     https  
     Azure CDN, used by Myget for distributing files.  
  
  
    <code>activate.uipath.com</code> 
     TCP  
     443  
     https  
     Licensing Server. If we block this service then UiPath <sup> &reg; </sup> is not able to check the license status and verify the data in the license folder.  
  
  
    <code>jptk0*.proinity.net</code> 
     TCP  
     443  
     https  
     The Robot validates the root certification authority of the code signing certificate.  Please notice that this happens only if the root certification authority is not already in the Windows Certificate Store.  
  
  
    <code>*.nuget.org</code> 
     TCP  
     443  
     https  
     The Robot downloads the required activity dependencies.  
  
  
    <code>a23-*-*-*.deploy.static.akamaitechnologies.com</code> 
     TCP  
     80  
     http  
     The Robot checks whether or not the code signing certificate has been revoked.  
  
  
    <code>x1.i.lencr.org</code> 
     TCP  
     80  
     http  
    To verify whether the Let's Encrypt certificate authority has revoked the code signing certificate. 
  
  
    <code>*.service.signalr.net</code> 
     TCP  
     443  
     https, wss  
     The Robot connects to Orchestrator's SignalR channels.  
  
  
    <code>*.ingest.sentry.io</code> 
     TCP  
     443  
     https  
     The UiPath <sup> &reg; </sup> Assistant sends the application errors to Sentry in order to track and solve the most usual problems.  
  
  
    <code>dev.azure.com</code><code>pkgs.dev.azure.com</code><code>*.blob.core.windows.net</code> 
     TCP  
     443  
     https  
     To enable UiPath Robots to store and retrieve data using Azure storage services.  
  
  
    <code>gallery.uipath.com</code><code>marketplace.uipath.com</code><code>*.pkgs.visualstudio.com</code>Note: <code>gallery.uipath.com/api/v2</code> redirects to <code>uipath.pkgs.visualstudio.com</code>
     TCP  
     443  
     https  
     These are the URLs for the Marketplace NuGet feed.  
  
  
    <code>dc.applicationinsights.azure.com</code><code>dc.applicationinsights.microsoft.com</code><code>dc.services.visualstudio.com</code><code>*.in.applicationinsights.azure.com</code> 
     TCP  
     443  
     https  
     The Robot uses these endpoints to send telemetry data.  
  
  
    <code>asstoffalp.z6.web.core.windows.net</code> 
    TCP 
    443 
    https 
     Used to load components for the UiPath <sup> &reg; </sup> Assistant for Excel add-in.  
  
  
    <code>*.trafficmanager.net</code> 
     TCP  
     443  
     wss  
    Proxy service used by the  Live Streaming  feature to connect between the robot and browser. 
  
 

Below you can find the URL list in a raw JSON format which can be added to your allow list network configuration.

```
[
    "cloud.uipath.com",
    "download.uipath.com",
    "pkgs.dev.azure.com",
    "uipathpackages.myget.org",
    "*.vo.msecnd.net",
    "activate.uipath.com",
    "jptk0*.proinity.net",
    "*.nuget.org",
    "a23-*-*-*.deploy.static.akamaitechnologies.com",
    "x1.i.lencr.org",
    "*.service.signalr.net",
    "*.ingest.sentry.io",
    "dev.azure.com",
    "pkgs.dev.azure.com",
    "*.blob.core.windows.net",
    "gallery.uipath.com",
    "marketplace.uipath.com",
    "*.pkgs.visualstudio.com",
    "dc.applicationinsights.azure.com",
    "dc.applicationinsights.microsoft.com",
    "dc.services.visualstudio.com",
    "*.in.applicationinsights.azure.com",
    "asstoffalp.z6.web.core.windows.net",
    "*.trafficmanager.net"
  ]
```

## Robot Actions for Each URL

The following actions are performed by the Robot in Orchestrator on packages for these services:

|  | cloud.uipath.com | pkgs.dev.azure.com | activate.uipath.com | jptk0*.proinity.net | NuGet.org | a23---*. deploy.static. akamaitechnologies.com |
| --- | --- | --- | --- | --- | --- | --- |
| **Receive** | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ |
| **Send** | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ |
| **Activation** | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ |
| **Not Connected** | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
| **Connected from UiRobot** | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
| **Publish to Orchestrator** | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
| **Manually Start** | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
| **Scheduled Start** | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
| **Application Update** | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ |
| **Package Update** | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ |

Depending on your business policy, some URLs might need to be allowed for the following actions:

* **Activating your License** - https://activate.uipath.com (port 443). This URL only needs to be allowed for Robots which are licensed locally.
* **Updating Studio** - `*.uipath.com/beta/` (port 80), Beta update channel for the Community Edition
* **Downloading Packages** - `pkgs.dev.azure.com`, `*.vo.msecnd.net, www.nuget.org` (port 443)
* **Connecting to Automation Cloud Orchestrator** - https://cloud.uipath.com (port 443)
* **Subscribing to Orchestrator's SignalR channels** - `*.service.signalr.net` (port 443)