The list below contains details of the AWS servers from which Forcepoint ONE SSE will send traffic to your internal applications and servers. Unless explicitly specified, most requests are made via HTTPS on port 443.
All the traffic to Forcepoint ONE SSE servers is geo-based and is routed to the closest datacenter to the user. From there, it is sent to your exchange servers/applications, and the user gets the data from these applications. For an uninterrupted flow of traffic, keep these IP addresses in the permit list on corporate security devices along with the IPs or domains mentioned in Forcepoint ONE Bypass Lists for Firewalls and Security Software.
Forcepoint ONE SSE has multiple (two or more) availability zones in each supported geo-location.
Use the following IPs for portal.us.bitglass.net
| IP address | Geo-location | State, Country |
|---|---|---|
|
3.225.54.64 3.213.153.110 34.237.130.181 44.198.17.102 50.17.56.134 52.4.208.194 52.73.203.173 52.203.97.179 |
US-east | Virginia, US |
|
18.132.32.56 18.134.118.90 18.170.183.251 35.177.5.12 35.177.232.161 35.178.49.65 52.56.113.28 52.56.186.39 |
Europe | London, England |
|
3.1.58.78 13.214.111.140 18.136.231.155 18.142.13.62 52.76.64.176 54.151.217.30 54.251.6.133 |
Asia-Pacific | Singapore |
Use the following IPs for portal.bitglass.com
| IP address | Geo-location | State, Country |
|---|---|---|
|
54.208.217.50 54.209.16.26 54.211.116.43 |
US-east | Virginia, US |
|
52.14.90.44 52.14.141.67 |
US-east | Ohio, US |
|
54.186.59.220 54.201.207.98 50.112.166.42 54.213.141.227 |
US-west | Oregon,US |
|
54.94.63.66 54.232.202.32 54.233.232.122 |
South America | São Paulo, Brazil |
|
13.215.41.168 13.213.196.130 18.138.2.232 54.179.167.134 54.179.143.10 |
Asia-Pacific | Singapore |
|
35.154.86.161 43.205.175.43 15.206.136.156 |
Asia-Pacific | Mumbai, India |
|
35.177.246.230 35.177.232.253 |
Europe | London, England |
|
3.125.236.75 3.126.78.150 52.57.101.236 |
Europe | Frankfurt, Germany |
|
13.237.116.14 13.238.32.246 13.236.141.41 |
Oceania | Sydney, Australia |
Use the following IPs for portal.eu.bitglass.net
| IP address | Geo-location | State, Country |
|---|---|---|
|
3.67.200.243 18.196.87.190 3.70.32.119 |
Europe | Frankfurt, Germany |
|
3.29.59.167 3.29.78.100 3.28.248.72 |
UAE | Dubai, UAE |
The egress IP addresses for the Cloud SWG virtual datacenters can be obtained by doing a nslookup for each cloud FQDN available on the pages for the primary and secondary tunnels. Use these IP addresses together with the Forcepoint ONE SSE cloud IP addresses defined above to allow traffic from Forcepoint ONE SSE IPs with your cloud applications.
Following is the list of regions available for Cloud SWG virtual datacenters:
|
|
The list of firewall exceptions to be made to support RBI for Forcepoint ONE SSE:
| Environment | Exception URL | Outbound Ports to which connection is made |
|---|---|---|
| Trial | *.rbi.poc.forcepoint.com | 30000 – 32767 |
| Production | *.rbi.forcepoint.com | 30000 – 32767 |
| Production EU | *.rbi.forcepoint.com | 30000 – 32767 |
Forcepoint ONE SSE Local Edge Data Centers are located in regional metropolitan areas to reduce latency. Currently, deployed at the following locations:
TCP 443 Outbound: This should be open for ActiveSync and AD Sync/Authentication traffic.