# Legacy - Configuring the firewall for Test Cloud > For general network configuration and firewall information, refer to [Configuring the firewall](https://docs.uipath.com/test-cloud/automation-cloud/latest/admin-guide/configuring-firewall#configuring-the-firewall) For general network configuration and firewall information, refer to [Configuring the firewall](https://docs.uipath.com/test-cloud/automation-cloud/latest/admin-guide/configuring-firewall#configuring-the-firewall) :::warning **Deprecation notice — action required** The outbound IP ranges listed on this page are being deprecated and will be replaced by [unified outbound IP ranges](https://docs.uipath.com/test-cloud/automation-cloud/latest/admin-guide/configuring-the-firewall-for-cloud). For specific dates, see the [Timeline](#timeline) in the Deprecation notice section below. **Before the transition end date**: Keep these IP ranges in your firewall configuration **and** add the new unified IP ranges. Both sets must be allowlisted simultaneously during the transition window. **After the transition end date**: Continue allowlisting both the IP ranges on this page and the unified IP ranges until a subsequent release note confirms the legacy IP ranges can be safely removed. ::: ## Deprecation notice The outbound IP ranges on this page are being replaced by a unified set of outbound IP ranges. This section summarizes the full timeline, scope, and required actions. ### What is changing UiPath is consolidating all service-specific outbound IP ranges into a single set of [unified outbound IP ranges](https://docs.uipath.com/test-cloud/automation-cloud/latest/admin-guide/configuring-the-firewall-for-cloud), organized by global customer region rather than by individual service. The new unified ranges apply uniformly to all services within each region. **Affected services**: Test Cloud Portal, AI Trust Layer, Notification Service, Orchestrator, Test Manager, Apps, Automation Ops, and Integration Service. **Not affected** (no changes to their IP ranges): Insights, IXP, and Automation Cloud Robots - Serverless. ### Timeline | Milestone | Date | | --- | --- | | Unified IP ranges published; deprecation announced; dual-allowlist window begins | June 16, 2026 | | Dual-allowlist window ends; legacy IP ranges begin phased-out | September 16, 2026 | | This page no longer updated | September 16, 2026 | ### What you need to do 1. **Add the unified IP ranges now.** Visit the [Configuring the firewall for Test Cloud](https://docs.uipath.com/test-cloud/automation-cloud/latest/admin-guide/configuring-the-firewall-for-cloud) page and add all ranges for your region. 2. **Before the transition end date** (see [Timeline](#timeline)): Keep the IP ranges on this page and the new unified IP ranges **both** allowlisted simultaneously. 3. **After the transition end date**: Continue allowlisting both sets of IP ranges until a subsequent release note confirms the legacy IP ranges can be safely removed. ## Test Cloud Portal Allow these domains used by Test Cloud Portal: :::important If you use Azure buckets, they must not be located in the tenant's region or in the failover region. ::: ### Domains | Scenario | Domains | | --- | --- | | Sign in with basic authentication | `https://account.uipath.com``https://cloud.uipath.com``https://platform-cdn.uipath.com` | | Sign in with Microsoft | `https://aadcdn.msftauth.net``https://account.uipath.com``https://cloud.uipath.com``https://login.live.com``https://login.microsoftonline.com``https://platform-cdn.uipath.com` | | Sign in with Google | `https://account.uipath.com``https://cloud.uipath.com``https://accounts.google.com``https://google.com``https://lh3.googleusercontent.com``https://platform-cdn.uipath.com``https://www.gstatic.com` | | Sign in with LinkedIn | `https://account.uipath.com``https://cloud.uipath.com``https://lnkd.demdex.net``https://platform-cdn.uipath.com``https://platform.linkedin.com``https://static-exp1.licdn.com``https://www.linkedin.com` | | Sign in with Azure Active Directory (Azure AD) | `https://aadcdn.msftauth.net``https://cloud.uipath.com``https://login.microsoftonline.com` | | Sign in with UiPath Assistant (basic email) | `*-signalr.service.signalr.net` For events related to signing in with basic authentication: `https://account.uipath.com``https://cloud.uipath.com``https://platform-cdn.uipath.com` | | Sign in with UiPath Studio (basic email) | `https://api.nuget.org``*-signalr.service.signalr.net``https://gallery.uipath.com``https://pkgs.dev.azure.com` For events related to signing in with basic authentication: `https://account.uipath.com``https://cloud.uipath.com``https://platform-cdn.uipath.com` | | Sign in for the first time / Reset password | `uipath.eu.auth0.com``account.uipath.com` | | Static assets: Fonts, Styling and CDN hosted scripts | Fonts: `https://use.typekit.net``https://fonts.gstatic.com``https://platform-cdn.uipath.com`Images: `https://s.gravatar.com``https://secure.gravatar.com``https://*.wp.com``https://*.googleusercontent.com``https://i.ytimg.com``https://platform-cdn.uipath.com`CSS: `https://fonts.googleapis.com/css``https://use.typekit.net``https://p.typekit.net``https://platform-cdn.uipath.com`Scripts: `https://primer.typekit.net``https://use.typekit.net``https://platform-cdn.uipath.com` | | Sign in via Auth0 (for EU) | `uipath.eu.auth0.com` | | Update services | `ctldl.windowsupdate.com` To configure network connections, use [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus#21-configure-network-connections). | | Download Autopilot for Everyone from the AI Trust Layer admin section | `https://autopilot-prd.azureedge.net` | ### Outbound IP ranges to enable a firewall for the customer-managed key Required only when the Test Cloud Portal must connect to your Azure Key Vault for Customer-Managed Key (CMK) scenarios. These outbound IP ranges represent the source IP ranges that your firewall must allow. For details, refer to the [Enabling the firewall for the customer-managed key](https://docs.uipath.com/test-cloud/automation-cloud/latest/admin-guide/enabling-a-firewall-for-your-key-vault#enabling-a-firewall-for-the-customer-managed-key) documentation. :::note The planned migration of Test Cloud Portal CMK outbound IP ranges to new ranges — previously tracked as a separate transition (see the [April 27, 2026 outbound IP ranges completion announcement](https://docs.uipath.com/automation-cloud/automation-cloud/latest/release-notes/april-2026#outbound-ip-range-updates-completed)) — has been paused. This migration is now absorbed into the broader [unified outbound IP ranges](https://docs.uipath.com/test-cloud/automation-cloud/latest/admin-guide/configuring-the-firewall-for-cloud) transition. The IP ranges listed below remain active until the transition end date shown in the [Timeline](#timeline). ::: Allow these outbound IP ranges through your firewall: Regions Outbound IP ranges Australia 
20.213.69.140/30
20.92.42.116/30
Canada 
20.220.159.8/30
20.104.134.160/30
Community 
20.166.153.132/30
20.23.210.168/30
European Union 
20.166.153.132/30
20.23.210.168/30
European Union (delayed) 
20.166.153.132/30
20.23.210.168/30
India 
20.219.182.96/30
52.140.57.140/30
Japan 
20.78.114.120/30
104.215.9.124/30
Singapore 
20.198.150.140/30
52.140.57.140/30
United Kingdom 
20.90.169.148/30
51.142.146.56/30
United States 
20.232.224.12/30
20.66.65.144/30
United States (delayed) 
20.232.224.12/30
20.66.65.144/30
### Outbound IPs for notifications You can configure Notification service systems to use SMTP servers from your own on-premises or cloud networks. If you want to provide additional security to your Notification service system, you can protect it with a firewall, and only allow Notification Service's outbound static IP ranges through it. ``` 20.213.69.140/30 20.92.42.116/30 20.220.159.8/30 20.104.134.160/30 20.239.121.152/30 20.232.224.12/30 20.78.114.120/30 104.215.9.124/30 20.166.153.132/30 20.198.150.140/30 20.23.210.168/30 20.66.65.144/30 149.72.70.144 ``` ### Relay Allow these domains used by the Relay client to establish connectivity to Test Cloud: | Purpose | Domains | Protocol | Port | | --- | --- | --- | --- | | Authentication and relay registration | `cloud.uipath.com` | HTTPS | 443 | | Relay server - US region | `us-relay.uipath.com` | TCP (TLS passthrough required) | 443 | | Relay server - EU region | `eu-relay.uipath.com` | TCP (TLS passthrough required) | 443 | | Relay server - Canada region | `ca-relay.uipath.com` | TCP (TLS passthrough required) | 443 | | Relay server - Switzerland region | `ch-relay.uipath.com` | TCP (TLS passthrough required) | 443 | | Relay server - Australia region | `au-relay.uipath.com` | TCP (TLS passthrough required) | 443 | | Relay server - Singapore region | `sg-relay.uipath.com` | TCP (TLS passthrough required) | 443 | | Relay server - Japan region | `jp-relay.uipath.com` | TCP (TLS passthrough required) | 443 | | Relay server - South Korea region | `kr-relay.uipath.com` | TCP (TLS passthrough required) | 443 | | Relay server - UAE region | `ae-relay.uipath.com` | TCP (TLS passthrough required) | 443 | | Relay server - UK region | `uk-relay.uipath.com` | TCP (TLS passthrough required) | 443 | ## Action Center ### Domains The following table lists the domains used by Action Center that we recommend allowing, based on the functionality you plan to use: | Scenario | Domains to Allow | | --- | --- | | Authentication | `https://cloud.uipath.com``https://account.uipath.com/``https://lh3.googleusercontent.com/` | | Navigate to Action Center page | `https://cloud.uipath.com``https://uipath-acc-prod.azureedge.net/``https://www.youtube.com/``https://platform-cdn.uipath.com/``https://fonts.gstatic.com/``*.googleapis.com` | | View/Assign/Un-assign/Delete an Action | `https://cloud.uipath.com``https://api.smartling.com/``https://uipath-acc-prod.azureedge.net/``*.cloudfront.net``https://platform-cdn.uipath.com/``https://fonts.gstatic.com/``*.googleapis.com` | | Storage bucket (File upload/download) | `*.blob.core.windows.net` | ## AI Center ### Domains The following table lists the domains used by AI Center: Module or Scenario Domains to Allow AI Center Identity Server https://cloud.uipath.com PkgManager https://cloud.uipath.com Deployer https://cloud.uipath.com Helper https://cloud.uipath.com Trainer https://cloud.uipath.com AppManager https://cloud.uipath.com Upload files Australia: https://aifproddataauetraining.blob.core.windows.net Canada: https://aifproddatacactraining.blob.core.windows.net Europe: https://aifproddatawetraining.blob.core.windows.net Japan: https://aifproddatajaetraining.blob.core.windows.net Singapore: https://aifproddataseatraining.blob.core.windows.net USA: https://aifproddataeustraining.blob.core.windows.net GXP: https://aifgxpdatawetraining.blob.core.windows.net Third-party Services AppInsights https://bam.eu01.nr-data.nethttps://eastus-6.in.applicationinsights.azure.com/ Static Assets https://aifprodassets.azureedge.nethttps://i2.wp.com/cdn.auth0.comhttps://api.smartling.comhttps://s.gravatar.comhttps://js-agent.newrelic.comhttps://fonts.gstatic.comhttps://use.typekit.nethttps://fonts.googleapis.comhttps://d2c7xlmseob604.cloudfront.nethttps://du-prod-cdn.azureedge.net/https://aifprodassets.azureedge.net/ Navigate to AI Center Permissions https://cloud.uipath.com OpenId configuration https://cloud.uipath.comhttps://dc.services.visualstudio.comhttps://d2c7xlmseob604.cloudfront.nethttps://use.typekit.nethttps://fonts.googleapis.comhttps://aifstgassets.azureedge.nethttps://p.typekit.nethttps://fonts.gstatic.comhttps://api.smartling.comhttps://js-agent.newrelic.comhttps://i2.wp.com/cdn.auth0.comhttps://bam.eu01.nr-data.nethttps://du-prod-du-eus-signalr.service.signalr.net/wss://du-prod-du-eus-signalr.service.signalr.net/ ## AI Computer Vision The following table lists the endpoint values and server locations used by AI Computer Vision: The following table lists the endpoint values and server locations used by AI Computer Vision: | Endpoint Value | Server Location | | --- | --- | | `https://cv.uipath.com` | Nearest geolocation based on the request IP | | `https://cv-eu.uipath.com` | West Europe | | `https://cv-us.uipath.com` | US | | `https://cv-delayed.uipath.com` | [Delayed enterprise ring deployment](https://docs.uipath.com/ai-computer-vision/automation-cloud/latest/user-guide/delayed-enterprise-ring-deployment), located in the United States | ## AI Trust Layer – Bring your own LLM ### Outbound IP ranges Allow the following outbound IP ranges to establish communication between the Bring your own LLM functionality of AI Trust Layer, and your own system. The Bring your own LLM functionality depends on Integration Service connectors for communication. To use this capability and create connections successfully, you must also add the [Integration Service outbound IP ranges](https://docs.uipath.com/test-cloud/automation-cloud/latest/admin-guide/configuring-the-firewall-for-cloud#integration-service) to your allowlist. Table 1. Outbound IP ranges for Bring your own LLM Region Outbound IP ranges Australia Canada Europe (European Union) European Union delayed Community (Europe) India Japan Singapore United Kingdom United States United States delayed ## Apps ### Domains The following table lists the domains used by Apps that you need to allow: | Scenario | Domains to Allow | | --- | --- | | Navigate to Apps | `https://cloud.uipath.com``https://fonts.googleapis.com``https://cdnjs.cloudflare.com``https://uipath-apps-prd.azureedge.net``https://fonts.gstatic.com``https://dc.services.visualstudio.com``https://.uipath.host` | | Create apps, or create apps via import, or add or delete process | `https://cloud.uipath.com``https://uipath-apps-prd.azureedge.net` | | Export, clone, share, delete, edit, or publish an app | `https://cloud.uipath.com` | | Run or preview an app | `https://cloud.uipath.com``https://fonts.googleapis.com``https://cdnjs.cloudflare.com``https://uipath-apps-prd.azureedge.net``https://fonts.gstatic.com``https://dc.services.visualstudio.com``https://.uipath.host``https://api.uipath.com` | | Select on Processes or Create rule | `https://uipath-apps-prd.azureedge.net` | | Bind process | `https://uipath-apps-prd.azureedge.net``https://cloud.uipath.com``https://dc.services.visualstudio.com` | | General or Permission | `https://api.smartling.com` | | Create or delete a page, or create or delete History | `https://cloud.uipath.com``https://api.smartling.com` | | Connect to Apps | `*.trafficmanager.net``wss://*.uipath.systems``wss://cloud.uipath.com` | ### Outbound IP ranges The Apps service uses the outgoing IP ranges listed below for all external communications. The following table shows the available outbound IP ranges for each region. Region Outbound IP ranges Europe Europe (Secondary) Europe - Community Europe - Community (Secondary) US US (Secondary) Canada Canada (Secondary) Singapore Japan Japan (Secondary) Australia Australia (Secondary) India India (Secondary) UK UK (Secondary) GXP US (Secondary) GXP US Traffic from this IPs needs to be allowed through the Organization DMZ firewall and any other intermediate firewalls including the firewall on the computer/s in which Orchestrator application is hosted. * The associated port on which Orchestrator application is hosted needs to be exposed through the DMZ on all relevant firewalls (see the previous point). * An Orchestrator user who has read and execute access to relevant processes whose credential will be used from UiPath Apps to talk to Orchestrator. * If using local robot process execution through RobotJS, please ensure RobotJS is properly configured using instructions provided at [RobotJS](https://docs.uipath.com/robot/standalone/2024.10/user-guide/about-the-robot-javascript-sdk). #### Best practices * Ensure that the On-Premise hosted Orchestrator is only accessible through a secure HTTPS channel. * Create a low privilege user in Orchestrator that only has read and execute access to just the desired processes/folders and use that for the integration. #### CORS policy requirements for Storage Buckets When using storage buckets from an on-premises or hybrid Orchestrator, add `https://cloud.uipath.com` to the `acceptedRootURLs` list in the [UiPath.Orchestrator.dll.config file](https://docs.uipath.com/installation-and-upgrade/docs/uipath-orchestrator-dll-config). :::note * If your Orchestrator instance is hosted in Test Cloud, this configuration is already in place. * For external buckets, configure the allowed origins as described in the [CORS and CSP configuration](https://docs.uipath.com/orchestrator/v0/docs/cors-csp-configuration) guide." ::: UiPath Apps uploads and downloads files using the SAS URL generated by Orchestrator when interacting with storage buckets hosted in an on-premises environment. End users must have the appropriate permissions granted through that SAS URL to perform both upload and download operations. :::important All access control is defined and enforced by the underlying storage account configuration. UiPath does not manage or override these permissions. ::: If users encounter errors when uploading or downloading files through UiPath Apps, the **storage account's SAS policies or access restrictions** should be reviewed and updated by the storage owner to ensure the required level of access. ### Content types to add to the allow list UiPath Apps utilizes the content types `application/octet-stream` and `application/zip` for downloading specific DLL files required to run and preview created applications. It is important to ensure the following content types are allowed within your network settings to avoid interruptions in app functionality: ``` application/zip application/octet-stream application/json text/html application/javascript text/css font/woff2 image/vnd.microsoft.icon image/svg+xml image/bmp image/jpeg image/png image/gif ``` #### Key Considerations Apps are developed using Blazor technology, which processes assemblies directly in the browser. If restrictions for the required content types cannot be lifted within your network, Apps may not function as expected, as there are currently no alternative solutions to bypass these limitations. #### Apps in Studio Web as an alternative Apps in Studio Web are designed with a different architecture, that does not require downloading DLL files. If network restrictions prevent the use of Standalone Apps, consider adopting Apps in Studio Web (RPA Apps). This architecture eliminates dependency on restricted content types, ensuring smoother compatibility in restricted network environments. ## Automation Cloud Robots - Serverless ### Outbound IP ranges Outbound IP ranges for Automation Cloud Robots - Serverless enable you to route outbound network traffic through a dedicated, static IP address ranges managed by UiPath. This allows you to whitelist or securely integrate with external systems that restrict incoming connections to known IPs. #### Configuration You can enable static outbound IP ranges while [creating the Serverless template](https://docs.uipath.com/orchestrator/automation-cloud/latest/user-guide/executing-unattended-automations-with-serverless-robots#step-2-adding-serverless-robots-to-your-tenant) and going to the **Network Configuration** page. #### Availability The outbound IP ranges can sometimes change as a result of infrastructure deployments. To help keep you on top of any changes, we have compiled a list of up-to-date static outbound IP ranges, in the following tables. #### Community Users Region CIDR Outbound IP ranges Europe 
20.191.43.0/30
20.191.42.240/30
20.191.43.0
20.191.43.1
20.191.43.2
20.191.43.3
20.191.42.240
20.191.42.241
20.191.42.242
20.191.42.243
#### Enterprise Users Region CIDR Outbound IP ranges Australia 
20.53.170.116/30
20.53.170.208/30
20.53.170.116
20.53.170.117
20.53.170.118
20.53.170.119
20.53.170.208
20.53.170.209
20.53.170.210
20.53.170.211
United States 
20.102.5.168/30
20.102.0.76/30
172.202.61.224/30
*
20.15.227.248/30
*
20.102.5.168
20.102.5.169
20.102.5.170
20.102.5.171
20.102.0.76
20.102.0.77
20.102.0.78
20.102.0.79
172.202.61.224
*
172.202.61.225
*
172.202.61.226
*
172.202.61.227
*
20.15.227.248
*
20.15.227.249
*
20.15.227.250
*
20.15.227.251
*
Japan 
20.44.188.168/30
20.44.185.192/30
20.44.188.168
20.44.188.169
20.44.188.170
20.44.188.171
20.44.185.192
20.44.185.193
20.44.185.194
20.44.185.195
Europe (European Union) 
20.191.46.104/30
20.191.43.60/30
20.191.46.104
20.191.46.105
20.191.46.106
20.191.46.107
20.191.43.60
20.191.43.61
20.191.43.62
20.191.43.63
* Added on February 18th, 2026. ## Automation Hub ### Domains The following table lists the domains used by Automation Hub: The following table lists the domains used by Automation Hub: | Scenario | Domains to Allow | | --- | --- | | Navigate to the Automation Hub page | `https://cloud.uipath.com``http://*.userpilot.io``https://dc.services.visualstudio.com``https://ah-prod-ts-blue-eu.uipath.com``https://ah-prod-ts-blue-us.uipath.com``https://ah-prod-ts-blue-ja.uipath.com``https://ah-prod-ts-blue-au.uipath.com``https://ah-prod-ts-blue-ca.uipath.com``https://ah-prod-ts-blue-sea.uipath.com``https://ah-prod-ts-blue-uk.uipath.com``https://ah-prod-ts-blue-in.uipath.com``https://ah-gxp-ts-blue-us.uipath.com` | | Use OpenAPI for Automation Hub | `https://automation-hub.uipath.com``http://ah-gxp-openapi-us.uipath.com` | ## Automation Ops ### Domains The following table lists the domains used by Automation Ops: | Scenario | Domains to Allow | | --- | --- | | Navigate to the Automation Ops page | `https://stdadmstgcdn.azureedge.net``https://app.vssps.visualstudio.com``https://stdadmstgcdn.blob.core.windows.net``https://nexus.ensighten.com``https://cloud.uipath.com``https://platform-cdn.uipath.com``https://use.typekit.net``https://p.typekit.net``https://content.usage.uipath.com``https://dc.services.visualstudio.com``https://data.usage.uipath.com``*-signalr.service.signalr.net``https://s.gravatar.com``https://i2.wp.com``https://github.com``https://github.githubassets.com``https://avatars.githubusercontent.com``https://collector.github.com``https://api.github.com` | ### Outbound IP ranges The table below lists all outbound IP ranges currently used by Automation Ops. Region Outbound IP ranges Australia Japan United States United States GXP Europe Europe GXP Canada Singapore India UK ## IXP ### Domains The following table lists the domains that IXP uses: | Scenario | Domains to Allow | | --- | --- | | Admin Portal / Identity Server | `https://cloud.uipath.com` | | Static assets | `https://fonts.googleapis.com``https://fonts.gstatic.com` | | Azure SignalR | `*.service.signalr.net` | | Telemetry | `https://*.in.applicationinsights.azure.com``https://dc.services.visualstudio.com` | | Pendo (clickable in-app guides) | `https://*.pendo.io` | | Performance monitoring | `https://o486811.ingest.sentry.io` | ### Inbound IP ranges :::note This section applies only to legacy Re:infer customers. ::: Add the following inbound IP ranges to your allow list to use IXP and create connections: Region Inbound IP ranges Europe 
34.91.100.206
US 
34.69.242.10
20.62.244.78
Japan 
34.84.144.176
Australia 
35.189.46.91
Canada 
34.152.10.176
Singapore 
35.240.179.214
### Outbound IP ranges Allow the following outbound IP ranges for IXP to sync emails from your Exchange. For details, check the [Overview Exchange integration](https://docs.uipath.com/communications-mining/automation-cloud/latest/developer-guide/overview-exchange-integration). Region Outbound IP ranges Europe 
35.204.220.118
US 
34.71.173.219
Japan 
34.84.107.92
Australia 
34.87.223.173
Canada 
34.152.42.160
Singapore 
34.143.128.81
## Data Fabric ### Domains The following table lists the domains used by Data Fabric: | Scenario | Domains to Allow | | --- | --- | | All Data Fabric operations | `https://cloud.uipath.com` | | Fetching static frontend content | `*.cloudapp.azure.com` | | Sending notifications to notification hub | `*.service.signalr.net` | | Collection of telemetry | `*.visualstudio.com` | ## Document Understanding ### Domains The following table lists the domains used by Document Understanding: | Module or Scenario | Domains to Allow | | --- | --- | | Navigate to Document Understanding | `https://*.uipath.com` | | Azure | `https://*.azure.com` | | Network | `https://*.azureedge.net``https://*.azurefd.net` | | Telemetry | `https://*.visualstudio.com` | | Azure SignalR | `https://*.service.signalr.net` | | Storage | `https://*.trafficmanager.net``https://*.blob.core.windows.net` | | Pendo | `https://*.pendo.io` | | Public endpoints | Check the [Public endpoints](https://docs.uipath.com/document-understanding/automation-cloud/latest/user-guide/public-endpoints) page for the full list of public endpoints URLs. | ## Insights ### Domains The following table lists the domains used by Insights: | Scenario | Domains to Allow | | --- | --- | | Navigate to the Insights page | `https://cloud.uipath.com``https://*.lookercdn.com``https://uipath-insights-statics.azureedge.net/``https://*.looker.uipath.com/` | ### Outbound IP ranges Outbound IP ranges allow you to add a list of IPs for Log Export and Real Time Data Export features to the allowlist and not open your network to all external IPs. If the Blob storage regions correspond to the respective Insights service region, you cannot use public IPs. Table 2. Insights Outbound static IP ranges Insights service region Blob storage region Functionality Outbound static IP ranges Europe North Europe West Europe Log Export 
4.209.242.155
52.158.117.70
48.209.163.160
132.220.192.40
Real Time Data Export 
48.209.165.211
4.209.26.11
Looker SFTP notifications 
34.159.94.48
34.159.97.39
34.89.186.9
United States of America North Europe West Europe East US West US Log Export 
4.209.242.155
134.33.227.198
134.33.128.26
Real Time Data Export 
4.156.106.136
134.33.152.158
Looker SFTP notifications 
34.145.223.13
34.150.213.234
35.186.171.220
Australia North Europe Australia East West Europe Australia Southeast Log Export 
4.209.242.155
4.254.65.248
Real Time Data Export 
4.237.200.13
4.237.193.83
Looker SFTP notifications 
34.151.78.48
34.116.85.140
34.87.195.36
35.189.54.47
Japan North Europe Japan East West Europe Japan West Log Export 
4.209.242.155
135.149.20.42
Real Time Data Export 
74.176.138.15
135.149.17.81
Looker SFTP notifications 
34.84.4.218
34.146.68.203
34.85.3.198
Canada North Europe Canada Central West Europe Canada East Log Export 
4.209.242.155
4.174.211.111
Real Time Data Export 
130.107.208.253
130.107.10.82
Looker SFTP notifications 
34.152.60.210
35.203.46.255
35.234.253.103
35.203.16.100
Singapore North Europe Southeast Asia West Europe East Asia Log Export 
4.209.242.155
57.158.137.134
Real Time Data Export 
20.247.146.89
57.158.190.211
Looker SFTP notifications 
34.87.134.202
34.143.132.206
34.143.210.116
35.185.184.54
India North Europe Central India West Europe South India Log Export 
4.209.242.155
98.70.224.34
Real Time Data Export 
135.235.177.71
135.235.249.14
Looker SFTP notifications 
35.200.158.11
34.100.209.232
34.93.170.82
United Kingdom North Europe UK South West Europe UK West Log Export 
4.209.242.155
131.145.43.57
Real Time Data Export 
74.177.240.23
85.210.75.139
Looker SFTP notifications 
34.147.209.63
35.197.212.7
34.142.53.66
GXP United States of America East US West US Log Export 
134.33.240.104
Real Time Data Export 
51.8.242.246
134.33.200.238
Looker SFTP notifications 
35.221.62.218
34.86.34.135
35.236.240.168
GXP Europe North Europe East US West Europe West US Log Export 
134.33.240.104
52.158.122.175
Real Time Data Export 
52.158.126.222
20.13.193.184
Looker SFTP notifications 
34.90.52.191
35.204.216.7
35.204.118.28
#### Limitations For Log Export, Google Storage does not support inbound IP restriction. Due to a limitation on Microsoft side for Log Export, you cannot set up inbound IP restriction when your Azure blob storage account and the Insights infrastructure is under the same region in Azure. Because of this, you cannot use the following regions for blob storage account based on the Insights service region: * Insights US: North Europe, East US * Insights Europe: North Europe, West Europe (For Community Licensing) * Insights UK: North Europe, UK South * Insights Canada: North Europe, Canada Central * Insights Singapore: North Europe, Southeast Asia * Insights India: North Europe, Central India * Insights Australia: North Europe, Australia East * Insights Japan: North Europe, Japan East * Insights GXP Europe: North Europe, East US * Insights GXP US: East US For more information on this limitation, check the [Restrictions for IP network rules](https://learn.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal#restrictions-for-ip-network-rules) page from the Microsoft Azure Blob Storage documentation. ## Integration Service ### Outbound IP ranges Add the following outbound IP ranges to your allow list to use Integration Service and create connections, as described in the following table. Region Outbound IP ranges Environment Australia Production Canada Production Europe Production Japan Production India Production Singapore Production United Kingdom Production United States Production GxP United States (Delayed update organizations) Production Community Production *IP addresses marked with an asterisk (*) are designated for newly incorporated Azure regions. These IPs will supersede the existing regional IPs upon completion of the scheduled tenant migration process. For details, refer to the [Integration Service release notes](https://docs.uipath.com/integration-service/automation-cloud/latest/release-notes/april-2025#scheduled-tenant-migration). ## Orchestrator ### Domains Robots send traffic to these Test Cloud Orchestrator domains. We recommend that you allow these domains to ensure proper functioning of your automations, as described in the following table: Robots send traffic to these Test Cloud Orchestrator domains. We recommend that you allow these domains to ensure proper functioning of your automations, as described in the following table: | Module or Functionality | Domains to Allow | | --- | --- | | UiPath Orchestrator | `https://cloud.uipath.com``https://orch-cdn.uipath.com``https://account.uipath.com` | | Automation Cloud Robots - VM | `https://cloud.uipath.com``https://download.uipath.com` | | Storage | `*.blob.core.windows.net` If using Amazon s3 buckets: `*.s3.amazonaws.com` | | Package and library feeds (library, tenant processes, and others) | `https://pkgs.dev.azure.com` | | Azure SignalR | `*.service.signalr.net` | | Studio and Robot auto-update functionality | `https://download.uipath.com` | | Traffic Manager (internal) | `*.trafficmanager.net` | ### Outbound IP ranges We recommend allowing these outbound IP ranges, which send traffic from Orchestrator towards your resources. For details, refer to [Orchestrator outbound IP ranges](https://docs.uipath.com/orchestrator/automation-cloud/latest/user-guide/orchestrator-outbound-ip-addresses). #### Community users Region CIDR Outbound IP ranges Europe (European Union) 
20.123.102.24/30
20.50.147.88/30
168.63.58.240/30
168.63.56.100/30
20.71.24.32/30
20.71.24.128/30
20.166.153.132/30
20.23.210.168/30
20.123.102.24
20.123.102.25
20.123.102.26
20.123.102.27
20.50.147.88
20.50.147.89
20.50.147.90
20.50.147.91
168.63.58.240
168.63.58.241
168.63.58.242
168.63.58.243
168.63.56.100
168.63.56.101
168.63.56.102
168.63.56.103
20.71.24.32
20.71.24.33
20.71.24.34
20.71.24.35
20.71.24.128
20.71.24.129
20.71.24.130
20.71.24.131
20.166.153.132
20.166.153.133
20.166.153.134
20.166.153.135
20.23.210.168
20.23.210.169
20.23.210.170
20.23.210.171
#### Enterprise users Region CIDR Outbound IP ranges Australia 
20.92.156.92/30
23.101.220.128/30
23.101.208.196/30
20.213.69.140/30
20.92.42.116/30
20.92.156.92
20.92.156.93
20.92.156.94
20.92.156.95
23.101.220.128
23.101.220.129
23.101.220.130
23.101.220.131
23.101.208.196
23.101.208.197
23.101.208.198
23.101.208.199
20.213.69.140
20.213.69.141
20.213.69.142
20.213.69.143
20.92.42.116
20.92.42.117
20.92.42.118
20.92.42.119
Canada 
20.116.141.44/30
20.63.56.64/30
20.63.56.68/30
20.220.159.8/30
20.104.134.160/30
20.116.141.44
20.116.141.45
20.116.141.46
20.116.141.47
20.63.56.64
20.63.56.65
20.63.56.66
20.63.56.67
20.63.56.68
20.63.56.69
20.63.56.70
20.63.56.71
20.220.159.8
20.220.159.9
20.220.159.10
20.220.159.11
20.104.134.160
20.104.134.161
20.104.134.162
20.104.134.163
United States 
20.124.53.40/30
20.121.182.72/30
20.121.104.124/30
40.114.108.32/30
40.114.108.220/30
20.232.224.12/30
20.66.65.144/30
20.124.53.40
20.124.53.41
20.124.53.42
20.124.53.43
20.121.182.72
20.121.182.73
20.121.182.74
20.121.182.75
20.121.104.124
20.121.104.125
20.121.104.126
20.121.104.127
40.114.108.32
40.114.108.33
40.114.108.34
40.114.108.35
40.114.108.220
40.114.108.221
40.114.108.222
40.114.108.223
20.232.224.12
20.232.224.13
20.232.224.14
20.232.224.15
20.66.65.144
20.66.65.145
20.66.65.146
20.66.65.147
Japan 
20.210.80.72/30
52.253.104.184/30
52.253.105.76/30
20.78.114.120/30
104.215.9.124/30
20.210.80.72
20.210.80.73
20.210.80.74
20.210.80.75
52.253.104.184
52.253.104.185
52.253.104.186
52.253.104.187
52.253.105.76
52.253.105.77
52.253.105.78
52.253.105.79
20.78.114.120
20.78.114.121
20.78.114.122
20.78.114.123
104.215.9.124
104.215.9.125
104.215.9.126
104.215.9.127
Europe (European Union) 
20.223.90.156/30
20.223.16.0/30
4.207.205.236/30
168.63.58.108/30
168.63.58.144/30
20.166.153.132/30
20.23.210.168/30
20.223.90.156
20.223.90.157
20.223.90.158
20.223.90.159
20.223.16.0
20.223.16.1
20.223.16.2
20.223.16.3
4.207.205.236
4.207.205.237
4.207.205.238
4.207.205.239
168.63.58.108
168.63.58.109
168.63.58.110
168.63.58.111
168.63.58.144
168.63.58.145
168.63.58.146
168.63.58.147
20.166.153.132
20.166.153.133
20.166.153.134
20.166.153.135
20.23.210.168
20.23.210.169
20.23.210.170
20.23.210.171
Singapore 
104.43.98.180/30
52.230.32.132/30
52.230.32.188/30
20.198.150.140/30
104.43.98.180
104.43.98.181
104.43.98.182
104.43.98.183
52.230.32.132
52.230.32.133
52.230.32.134
52.230.32.135
52.230.32.188
52.230.32.189
52.230.32.190
52.230.32.191
20.198.150.140
20.198.150.141
20.198.150.142
20.198.150.143
United Kingdom 
20.90.174.164/30
51.140.5.96/30
51.140.6.156/30
20.90.169.148/30
51.142.146.56/30
20.90.174.164
20.90.174.165
20.90.174.166
20.90.174.167
51.140.5.96
51.140.5.97
51.140.5.98
51.140.5.99
51.140.6.156
51.140.6.157
51.140.6.158
51.140.6.159
20.90.169.148
20.90.169.149
20.90.169.150
20.90.169.151
51.142.146.56
51.142.146.57
51.142.146.58
51.142.146.59
India 
4.224.102.80/30
40.80.89.112/30
40.80.89.132/30
20.219.182.96/30
52.140.57.140/30
4.224.102.80
4.224.102.81
4.224.102.82
4.224.102.83
40.80.89.112
40.80.89.113
40.80.89.114
40.80.89.115
40.80.89.132
40.80.89.133
40.80.89.134
40.80.89.135
20.219.182.96
20.219.182.97
20.219.182.98
20.219.182.99
52.140.57.140
52.140.57.141
52.140.57.142
52.140.57.143
#### Delayed update organizations Region CIDR Outbound IP ranges Europe (European Union) 
168.63.56.128/30
168.63.56.212/30
20.166.153.132/30
20.23.210.168/30
4.207.205.236/30
168.63.56.128
168.63.56.129
168.63.56.130
168.63.56.131
168.63.56.212
168.63.56.213
168.63.56.214
168.63.56.215
20.166.153.132
20.166.153.133
20.166.153.134
20.166.153.135
20.23.210.168
20.23.210.169
20.23.210.170
20.23.210.171
4.207.205.236
4.207.205.237
4.207.205.238
4.207.205.239
United States 
40.114.109.36/30
40.114.109.64/30
20.232.224.12/30
20.66.65.144/30
20.121.104.124/30
40.114.109.36
40.114.109.37
40.114.109.38
40.114.109.39
40.114.109.64
40.114.109.65
40.114.109.66
40.114.109.67
20.232.224.12
20.232.224.13
20.232.224.14
20.232.224.15
20.66.65.144
20.66.65.145
20.66.65.146
20.66.65.147
20.121.104.124
20.121.104.125
20.121.104.126
20.121.104.127
### MCP Servers The remote MCP Servers service uses the outgoing IP ranges listed below for all external communications. The following table shows the available outbound IP ranges for each region. Region Outbound IP ranges Europe 
94.245.89.4/30
94.245.93.8/30
Europe (Secondary) 
20.67.88.64/30
20.67.88.112/30
Europe - Community 
94.245.93.132/30
94.245.93.148/30
Europe - Community (Secondary) 
20.67.88.116/30
20.67.88.132/30
US 
104.211.63.160/30
104.211.58.236/30
US (Secondary) 
13.66.167.4/30
13.66.163.204/30
Canada 
20.151.112.252/30
20.151.113.120/30
Canada (Secondary) 
40.86.219.188/30
40.86.224.148/30
Singapore 
104.215.184.68/30
104.215.185.96/30
Japan 
20.89.104.152/30
20.89.104.200/30
Japan (Secondary) 
40.74.64.240/30
40.74.65.80/30
Australia 
13.75.193.84/30
13.75.193.112/30
Australia (Secondary) 
13.77.46.56/30
13.77.40.228/30
India 
40.80.89.64/30
40.80.89.136/30
India (Secondary) 
104.211.218.152/30
104.211.222.120/30
UK 
51.104.16.124/30
51.104.16.168/30
UK (Secondary) 
51.140.205.20/30
51.140.205.248/30
GXP Europe 
94.245.93.164/30
94.245.93.196/30
GXP Europe (Secondary) 
20.67.88.148/30
20.67.88.164/30
GXP US 
104.211.56.184/30
40.114.71.160/30
GXP US (Secondary) 
13.66.166.60/30
13.66.160.164/30
## Process Mining ### Domains The following table lists the domains used by Process Mining: | Module or Scenario | Domains to Allow | | --- | --- | | Identity Server | `https://cloud.uipath.com` | | Static assets | `https://fonts.googleapis.com``https://fonts.gstatic.com``https://content.usage.uipath.com``https://s.gravatar.com``https://i1.wp.com` | | Azure SignalR | `*.service.signalr.net` | | Telemetry | `https://*.in.applicationinsights.azure.com` | | Upload files | `*.blob.core.windows.net` | ## Solutions ### Domains The following table lists the domains used by Solutions: | Scenario | Domains to Allow | | --- | --- | | Navigate to the Solutions Management page | `https://cloud.uipath.com``https://fonts.googleapis.com``https://fonts.gstatic.com``https://dc.services.visualstudio.com``api.smartling.com``use.typekit.net``p.typekit.net``s.gravatar.com``i2.wp.com``https://platform-cdn.uipath.com``https://sol-cdn.uipath.com``https://solutions.uipath.com` | | Storage | `*.blob.core.windows.net` | | Azure SignalR | `*.service.signalr.net` | ## Studio Web ### Domains The following table lists the domains used by Studio Web: | Module or Functionality | Domains to Allow | | --- | --- | | Azure SignalR | `wss://*.service.signalr.net``https://*.service.signalr.net``wss://*.trafficmanager.net` | | UiPath products | `https://*.uipath.com` | | UiPath products (in-app feedback) | `https://studio-feedback.azure-api.net` | | UiPath products (static assets) | `https://platform-cdn.uipath.com``https://content.usage.uipath.com``https://fonts.gstatic.com``https://d2c7xlmseob604.cloudfront.net``https://fonts.googleapis.com/``https://*.typekit.net``https://fonts.gstatic.com``https://s.gravatar.com``https://secure.gravatar.com``https://*.wp.com``https://*.googleusercontent.com``https://i.ytimg.com` | | UiPath products (telemetry) | `https://data.usage.uipath.com` | | Third-party services (clickable guides) | `https://*.pendo.io` | | Third-party services (storage) | `https://*.blob.core.windows.net``https://*.amazonaws.com` | | Third-party services (telemetry) | `https://dc.services.visualstudio.com` | | Third-party services (translations helper) | `https://api.smartling.com` | ## Task Mining ### Domains If your company uses proxies, the URLs, described in the following table, need to be added to the Firewall Exceptions so the Task Mining desktop components connect to our web servers. :::note The Task Mining Desktop application uses web sockets for real-time communication with the server (telemetry and governance). For the URLs and IPs to be allowed, the transparent proxy is expected to have the HTTPS and WSS protocols enabled. ::: Component URL Port Admin Portal https://cloud.uipath.com 443 Web Portal *.blob.core.windows.net 443 Pendo https://content.usage.uipath.com 443 Azure App Insights dc.services.visualstudio.comdc.applicationinsights.azure.comdc.applicationinsights.microsoft.comdc.services.visualstudio.com*.in.applicationinsights.azure.comlive.applicationinsights.azure.comrt.applicationinsights.microsoft.comrt.services.visualstudio.com{region}.livediagnostics.monitor.azure.com 443 Azure Signalr service.signalr.net*.service.signalr.net 443 Avatars i2.wp.com/cdn.auth0.com/avatars 443 ## Test Manager This section lists the domains used by Test Manager and the outbound IP ranges that you should consider allowing if you want to use various Test Manager capabilities. ### Domains The following table lists the domains used by Test Manager that we recommend allowing, based on the functionality you plan to use: | Module or functionality | Domains to allow | | --- | --- | | UiPath Test Manager | `https://cloud.uipath.com` | | Azure SignalR | `*.service.signalr.net` | ### SAP Heatmap and CIA RFC Outbound IPs Allow the following outbound IP ranges to establish communication between UiPath Test Manager and your SAP system via an RFC connection. The following table shows the available outbound IP ranges for each region. Region Outbound IP ranges Australia Canada Europe (European Union) India GXP United States Japan Singapore United Kingdom United States ### SAP Heatmap and CIA Web Service Outbound IPs Allow the following static outbound IP ranges to enable the communication between UiPath Test Manager and your SAP system, via a web service connection. Allow these outbound IP ranges through your firewall: Regions Outbound IP ranges Australia 
20.213.69.140/30
20.92.42.116/30
Canada 
20.220.159.8/30
20.104.134.160/30
Community 
20.166.153.132/30
20.23.210.168/30
European Union 
20.166.153.132/30
20.23.210.168/30
European Union (delayed) 
20.166.153.132/30
20.23.210.168/30
India 
20.219.182.96/30
52.140.57.140/30
Japan 
20.78.114.120/30
104.215.9.124/30
Singapore 
20.198.150.140/30
52.140.57.140/30
United Kingdom 
20.90.169.148/30
51.142.146.56/30
United States 
20.232.224.12/30
20.66.65.144/30
United States (delayed) 
20.232.224.12/30
20.66.65.144/30
### Outbound IP ranges for connectors If you enhance your system's security with a firewall, consider allowing only Test Manager outbound IP ranges for using out-of-the-box connectors. The following outbound IP ranges apply to all supported regions, including: Australia, Canada, European Union, India, Japan, Singapore, United Kingdom, United States, and GxP United States (delayed). Allow these outbound IP ranges through your firewall: Regions Outbound IP ranges Australia, Canada, European Union, India, Japan, Singapore, United Kingdom, United States, and GxP United States (delayed) 
20.92.42.116/30
20.213.69.140/30
20.220.159.8/30
20.104.134.160/30
20.23.210.168/30
20.166.153.132/30
20.219.182.96/30
52.140.57.140/30
20.66.65.144/30
20.232.224.12/30
104.215.9.124/30
20.78.114.120/30
20.198.150.140/30
51.142.146.56/30
20.90.169.148/30