Viewing IP and data center locations information

The list below contains details of the AWS servers from which Forcepoint Data Security Cloud | SSE will send traffic to your internal applications and servers. Unless explicitly specified, most requests are made via HTTPS on port 443.

All the traffic to Forcepoint Data Security Cloud | SSE servers is geo-based and is routed to the closest datacenter to the user. From there, it is sent to your exchange servers/applications, and the user gets the data from these applications. For an uninterrupted flow of traffic, keep these IP addresses in the permit list on corporate security devices along with the IPs or domains mentioned in Forcepoint Data Security Cloud Bypass Lists for Firewalls and Security Software.

Forcepoint Data Security Cloud | SSE has multiple (two or more) availability zones in each supported geo-location.

Commercial Cloud

Use the following IPs for portal.bitglass.com

IP address Geo-location State, Country

54.208.217.50

54.209.16.26

54.211.116.43

 US-east Virginia, US

52.14.90.44

52.14.141.67

 US-east Ohio, US

54.186.59.220

54.201.207.98

50.112.166.42

54.213.141.227

 US-west Oregon,US

54.94.63.66

54.232.202.32

54.233.232.122

 South America São Paulo, Brazil

13.215.41.168

13.213.196.130

18.138.2.232

54.179.167.134

54.179.143.10

 Asia-Pacific Singapore

35.154.86.161

43.205.175.43

15.206.136.156

 Asia-Pacific Mumbai, India

35.177.246.230

35.177.232.253

 Europe London, England

3.125.236.75

3.126.78.150

52.57.101.236

 Europe Frankfurt, Germany

13.237.116.14

13.238.32.246

13.236.141.41

 Oceania Sydney, Australia

Cloud SWG

The egress IP addresses for the Cloud SWG virtual datacenters can be obtained by doing a nslookup for each cloud FQDN available on the Analyze > Tunnels > Setup-Info pages for the primary and secondary tunnels. Use these IP addresses together with the Forcepoint Data Security Cloud | SSE cloud IP addresses defined above to allow traffic from Forcepoint Data Security Cloud | SSE IPs with your cloud applications.

Following is the list of regions available for Cloud SWG virtual datacenters:

  • US-East
  • US-West
  • EU-Ireland
  • EU-London
  • EU-Stockholm
  • EU-Frankfurt
  • EU-Paris
  • EU-Spain
  • ME-UAE
  • SA-Sao-Paulo
  • APAC-Mumbai
  • APAC-Singapore
  • APAC-Sydney
  • APAC-Tokyo

RBI

The list of firewall exceptions to be made to support RBI for Forcepoint Data Security Cloud | SSE:

Environment Exception URL Outbound Ports to which connection is made
Production *.rbi.forcepoint.com 30000 – 32767

Local Edge Data Centers

Forcepoint Data Security Cloud | SSE Local Edge Data Centers are located in regional metropolitan areas to reduce latency. Currently, deployed at the following locations:

  • South Asia & ANZ: Bangalore, Chennai, Hyderabad, Mumbai, and New Delhi, India; Melbourne and Perth, Australia.
  • APAC: Kuala Lumpur, Malaysia; Seoul, South Korea; Singapore; Taipei, Taiwan; Osaka and Tokyo, Japan
  • South America: Bogota, Colombia; Buenos Aires, Argentina; Santiago, Chile and São Paulo, Brazil

Ports

TCP 443 Outbound: This should be open for ActiveSync and AD Sync/Authentication traffic.