Viewing IP and data center locations information

The list below contains details of the AWS servers from which Forcepoint ONE SSE will send traffic to your internal applications and servers.

All the traffic to Forcepoint ONE SSE servers is geo-based and is routed to the closest datacenter to the user. From there, it is sent to your exchange servers/applications, and the user gets the data from these applications. For an uninterrupted flow of traffic, keep these IP addresses in the permit list on corporate security devices along with the IPs or domains mentioned in Forcepoint ONE Bypass Lists for Firewalls and Security Software.

Trial Cloud

Use the following IPs for portal.us.bitglass.net

IP address Geolocation State, Country

3.225.54.64

3.213.153.110

34.237.130.181

44.198.17.102

50.17.56.134

52.4.208.194

52.73.203.173

52.203.97.179

 US-east Virginia, US

18.132.32.56

18.134.118.90

18.170.183.251

35.177.5.12

35.177.232.161

35.178.49.65

52.56.113.28

52.56.186.39

 Europe London, England

3.1.58.78

13.214.111.140

18.136.231.155

18.142.13.62

52.76.64.176

54.151.217.30

54.251.6.133

 Asia-Pacific Singapore

Commercial Cloud

Use the following IPs for portal.bitglass.com

IP address Geolocation State, Country

54.208.217.50

54.209.16.26

54.211.116.43

 US-east Virginia, US

52.14.90.44

52.14.141.67

 US-east Ohio, US

54.186.59.220

54.201.207.98

50.112.166.42

54.213.141.227

 US-west Oregon,US

54.94.63.66

54.232.202.32

54.233.232.122

 South America São Paulo, Brazil

13.215.41.168

13.213.196.130

18.138.2.232

54.179.167.134

54.179.143.10

 Asia-Pacific Singapore

35.154.86.161

43.205.175.43

15.206.136.156

 Asia-Pacific Mumbai, India

35.177.246.230

35.177.232.253

 Europe London, England

3.125.236.75

3.126.78.150

52.57.101.236

 Europe Frankfurt, Germany

13.237.116.14

13.238.32.246

13.236.141.41

 Oceania Sydney, Australia

EU Commercial Cloud

Use the following IPs for portal.eu.bitglass.net

IP address Geolocation State, Country

3.67.200.243

18.196.87.190

3.70.32.119

 Europe Frankfurt, Germany

3.29.59.167

3.29.78.100

3.28.248.72

 UAE Dubai, UAE

Cloud SWG

The egress IP addresses for the Cloud SWG virtual datacenters can be obtained by doing a nslookup for each cloud FQDN available on the Analyze > Tunnels > Setup-Info pages for the primary and secondary tunnels. Use these IP addresses together with the Forcepoint ONE SSE cloud IP addresses defined above to allow traffic from Forcepoint ONE SSE IPs with your cloud applications.

Following is the list of regions available for Cloud SWG virtual datacenters:

  • US-East
  • US-West
  • EU-Ireland
  • EU-London
  • EU-Stockholm
  • EU-Frankfurt
  • EU-Paris
  • EU-Spain
  • ME-UAE
  • SA-Sao-Paulo
  • APAC-Mumbai
  • APAC-Singapore
  • APAC-Sydney
  • APAC-Tokyo

RBI

The list of firewall exceptions to be made to support RBI for Forcepoint ONE SSE:

Environment Exception URL Outbound Ports to which connection is made
Trial *.rbi.poc.forcepoint.com 30000 – 32767
Production *.rbi.forcepoint.com 30000 – 32767
Production EU *.rbi.forcepoint.com 30000 – 32767

Local Edge Data Centers

Forcepoint ONE SSE Local Edge Data Centers are located in regional metropolitan areas to reduce latency. Currently, deployed at the following locations:

  • South Asia & ANZ: Bangalore, Chennai, Hyderabad, Mumbai, and New Delhi, India; Melbourne and Perth, Australia.
  • APAC: Kuala Lumpur, Malaysia; Seoul, South Korea; Singapore; Taipei, Taiwan; Osaka and Tokyo, Japan
  • South America: Bogota, Colombia; Buenos Aires, Argentina; Santiago, Chile and São Paulo, Brazil

Ports

TCP 443 Outbound: This should be open for ActiveSync and AD Sync/Authentication traffic.