Print this page

What are the Salesforce IP Addresses & Domains to whitelist?

Knowledge Article Number 000003652
Description What are the Salesforce network IP addresses that I need to whitelist?
 
Resolution

Last updated on December 6, 2016.

Salesforce understands the importance of security and that customers need to be confident that they are communicating with Salesforce in a secure environment. IP whitelisting is one of the most effective methods of ensuring this and prevents any internet traffic intended for Salesforce from being hijacked or rerouted to a rogue website.

In order to ensure a secure connection, we provide the complete list of our public IP addresses.

We have exclusive ownership of every public IP address that we use. The IP addresses that we use have been allocated directly to us by The American Registry for Internet Numbers (ARIN), The Asia Pacific Network Information Centre (APNIC), and Réseaux IP Européens (RIPE). These organizations are coordinated by the Internet Assigned Numbers Authority (IANA) and the Internet Corporation for Assigned Names and Numbers (ICANN).

 

Salesforce’s IP Ranges

All IP ranges are provided in Classless Inter-Domain Routing (CIDR) notation. For more information on CIDR please see the Wikipedia article Classless Inter Domain Routing. 

Recommended for seamless access:

Our best practice is to whitelist our entire set of IP ranges. This is to ensure our login pools can process your end users' and integrations' login authentications when accessing Salesforce all over the world, and to avoid any unintended service disruptions due to movement between primary and secondary instances.

Salesforce does not offer static IP addresses or small ranges of IP addresses for individual instances.

Required for access:

Our recommended best practice is to whitelist our entire list of IP ranges; however, if you choose to only whitelist a subset of our list of IP ranges, you must do so according to the instructions below in order to avoid unintended service disruptions.

NOTE: This information is subject to change and we recommend that you check back quarterly for the addition of new IP ranges.

  • If you have end-users with multi-national internet entry points, then you should whitelist all IP ranges. This includes remote offices and traveling users. (For example, if you have an employee traveling to Tokyo and you do not whitelist the APNIC numbers, the employee would not be able to log in as our login pools would not be able to process their authentication due to whitelist blocking on your side.)

  • If your internet entry points are all contained within the NA region, then you may whitelist only the ARIN numbers.

  • If your internet entry points are all contained within the APAC region, then you may whitelist only the APNIC and ARIN numbers.

  • If your internet entry points are all contained within the EMEA region, then you may whitelist only the RIPE numbers. 

Salesforce’s Network Engineering team recommends that customers whitelist the following subnet mask IP's: 

IPv4 Networks

IPv4 IP Address Ranges

Date Added to Article

Date Activated
(if different from column 3)
 

ARIN

 

 

13.108.0.0/14

13.108.0.0 - 13.111.255.255August 2016January 2017

96.43.144.0/20

96.43.144.0 - 96.43.159.255

255 IPv4 Address added August 2016

255 IPv4 Address activated January 2017

136.146.0.0/15

136.146.0.0 - 136.147.255.255

255 IPv4 Address added August 2016

255 IPv4 Address activated January 2017

204.14.232.0/21

204.14.232.0 - 204.14.239.255

255 IPv4 Address added August 2016

255 IPv4 Address activated January 2017
 

RIPE

 

 

85.222.128.0/19

85.222.128.0 - 85.222.159.255

Range added April 14, 2015
255 IPv4 Address added August 2016

255 IPv4 Address activated January 2017

185.79.140.0/22

185.79.140.0 - 185.79.143.255

255 IPv4 Address added August 2016

255 IPv4 Address activated January 2017
 

APNIC

 

 
101.53.160.0/19101.53.160.0 - 101.53.191.255August 2016January 2017

182.50.76.0/22

182.50.76.0 - 182.50.79.255

255 IPv4 Address added August 2016

255 IPv4 Address activated January 2017

202.129.242.0/23

202.129.242.0 - 202.129.243.255

255 IPv4 Address added August 2016

255 IPv4 Address activated January 2017

Curious about assessing network performance, reducing payload, reducing network latency, or design considerations for integrations? Review our developers' Network Best Practices for Salesforce Architects blog post.

API Integrations

API integrations use the same set of IP ranges as the Salesforce website. Please use the IP ranges listed in Salesforce’s IP Ranges above.

Firewalls

IP whitelisting can occur at several different points on a customer’s network, but the most common place is the firewall. When adding or updating IP whitelisting, please ensure that any IP restrictions on your firewall match the described information in this article.

Required Domains

If your company has policies to whitelist only Salesforce domains, please include to the following domains to ensure you receive all content from Salesforce: 

*.content.force.com

*.force.com

*.salesforce.com

*.staticforce.com  

If you're using Force.com sites, and you want to set up domain name-based filtering, you will need to add in your My Domain (subdomain) followed by .secure.force.com to access your site (e.g. https://[MyDomainName].secure.force.com).

More information can be found in our Required Domains article.

Salesforce URLs not in our infrastructure:

If you need to whitelist specific URLs for internal routing (also known as URL filtering), please include the following URLs in your network settings:

Email Settings

NOTE: If you are a Gov Cloud customer, please refer to the What are the IP addresses that need to be white-listed for Gov Cloud customers? article for Email Settings details specific to your organization. 

Email Security Filters

Salesforce sends email from a variety of IP addresses. If your organization blocks any of these IP addresses, users may not receive all email sent from Salesforce. In order to ensure that your organization’s users receive all Salesforce emails, verify that the following IP addresses are whitelisted in your email server firewall.
 

From

To

Date Added to Article

Date Activated
(if different from column 3)

13.108.238.128

13.108.238.143

December 6, 2016

 

13.108.254.128

13.108.254.143

December 6, 2016

 

85.222.130.224

85.222.130.238

June 15, 2015

 

85.222.138.224

85.222.138.238

May 5, 2016

 

96.43.144.64

96.43.144.65

 

 

96.43.144.64

96.43.144.78

December 7, 2015

 

96.43.147.64

96.43.147.78

 

 

96.43.148.64

96.43.148.65

 

 

96.43.148.64

96.43.148.78

December 7, 2015

 

96.43.151.64

96.43.151.78

 

 

101.53.164.224

101.53.164.238

August 2016

January 2017

136.146.128.64

136.146.128.78

 

 

136.146.208.16

136.146.208.30

 

 

136.146.210.16

136.146.210.30

 

 

136.147.46.192

136.147.46.206

December 7, 2015

 

136.147.62.192

136.147.62.206

December 7, 2015

 

136.147.46.208

136.147.46.223

December 6, 2016

 

136.147.62.208

136.147.62.223

December 6, 2016

 

136.147.46.224

136.147.46.238

June 15, 2015

 

136.147.62.224

136.147.62.238

June 15, 2015

 

182.50.78.64

182.50.78.78

 

 

204.14.232.64

204.14.232.78

 

 

204.14.234.64

204.14.234.78

 

 

 

Trialforce Org Emails

If you want to receive email from any Trialforce Orgs that you may have set up, please be sure to include the following IPs:

IP Address

Date Added to article

Date Activated
(if different from column 2)

13.108.238.143

December 6, 2016

 

13.108.254.143

December 6, 2016

 

85.222.130.239

June 15th, 2015

 

85.222.138.239

May 5, 2016

 

96.43.144.79

December 7, 2015

 

96.43.147.79

 

 

96.43.148.79

December 7, 2015

 

96.43.151.79

 

 

101.53.164.239

August 2016

January 2017

136.146.128.79

 

 

136.146.208.31

 

 

136.146.210.31

 

 

136.147.46.207

December 7, 2015

 

136.147.46.223

December 6, 2016

 

136.147.46.239

June 15, 2015

 

136.147.62.207

December 7, 2015

 

136.147.62.223

December 6, 2016

 

136.147.62.239

June 15, 2015

 

182.50.78.79

 

 

204.14.232.79

 

 

204.14.234.79

 

 

 

Email Relaying

If you have enabled email relaying you will need to allow mail from the IP address which we use to send system email, Chatter and Communities mail, and those Salesforce uses for email relaying. 

In order to follow email marketing best practices and reduce the chance of IP addresses being blacklisted, Salesforce has started separating Chatter and Communities mail IP addresses from system mail IP addresses. Chatter and Communities mail includes activity notifications and digests that contain content specific to your company’s activity on Chatter and Communities. System mail includes, but is not limited to, new user email notifications and password reset emails.

The addresses used for Chatter and Communities mail include:

IP Address

Date Added to Article

Date Activated
(if different from column 2)

13.108.238.131

December 6, 2016

 

13.108.238.132

December 6, 2016

 

13.108.254.131

December 6, 2016

 

13.108.254.132

December 6, 2016

 

82.222.138.227

May 5, 2016

 

85.222.130.227

December 9, 2015

 

85.222.130.228

December 9, 2015

 

85.222.138.228

May 5, 2016

 

96.43.144.67

December 9, 2015

 

96.43.144.68

December 9, 2015

 

96.43.147.67

December 9, 2015

 

96.43.147.68

December 9, 2015

 

96.43.148.67

December 9, 2015

 

96.43.148.68

December 9, 2015

 

96.43.151.67

December 9, 2015

 

96.43.151.68

December 9, 2015

 

101.53.164.227

August 2016

January 2017

101.53.164.228

August 2016

January 2017

136.146.128.67

December 9, 2015

 

136.146.128.68

December 9, 2015

 

136.146.208.19

December 9, 2015

 

136.146.208.20

December 9, 2015

 

136.146.210.19

December 9, 2015

 

136.146.210.20

December 9, 2015

 

136.147.46.211

December 6, 2016

 

136.147.46.212

December 6, 2016

 

136.147.46.227

December 9, 2015

 

136.147.46.228

December 9, 2015

 

136.147.46.195

December 9, 2015

 

136.147.46.196

December 9, 2015

 

136.147.62.195

December 9, 2015

 

136.147.62.196

December 9, 2015

 

136.147.62.211

December 6, 2016

 

136.147.62.212

December 6, 2016

 

136.147.62.227

December 9, 2015

 

136.147.62.228

December 9, 2015

 

182.50.78.67

December 9, 2015

 

182.50.78.68

December 9, 2015

 

204.14.232.67

December 9, 2015

 

204.14.232.68

December 9, 2015

 

204.14.234.67

December 9, 2015

 

204.14.234.68

December 9, 2015

 


The addresses used for system mail include:

IP Address

Date Added to Article

Date Activated
(if different from column 2)

13.108.238.128

December 6, 2016

 

13.108.254.128

December 6, 2016

 

85.222.130.224

June 15, 2015

 

85.222.138.224

May 5, 2016

 

96.43.144.64

 

 

96.43.147.64

 

 

96.43.148.64

 

 

96.43.151.64

 

 

101.53.164.224

August 2016

January 2017

136.146.128.64

 

 

136.146.208.16

 

 

136.146.210.16

 

 

136.147.46.192

December 7, 2015

 

136.147.46.208

December 6, 2016

 

136.147.46.224

June 15, 2015

 

136.147.62.192

December 7, 2015

 

136.147.62.208
December 6, 2016

 

136.147.62.224

June 15, 2015

 

182.50.78.64

 

 

204.14.232.64

 

 

204.14.234.64

 

 

The addresses used for email relay include:

IP Address

Date Added to Article

Date Activated
(if different from column 2)

13.108.238.129

December 6, 2016

 

13.108.254.129

December 6, 2016

 

85.222.130.225

June 15, 2015

 

85.222.138.225

May 5, 2016

 

96.43.144.65

 

 

96.43.147.65

 

 

96.43.148.65

 

 

96.43.151.65

 

 

101.53.164.225

August 2016

January 2017

136.146.128.65

 

 

136.146.208.17

 

 

136.146.210.17

 

 

136.147.46.193

December 7, 2015

 

136.147.46.209

December 6, 2016

 

136.147.46.225

June 15, 2015

 

136.147.62.193

December 7, 2015

 

136.147.62.209

December 6, 2016

 

136.147.62.225

June 15, 2015

 

182.50.78.65

 

 

204.14.232.65

 

 

204.14.234.65

 

 

For more information on testing email deliverability, please see the Testing Email Deliverability article.

Issues Receiving Email

If you are experiencing issues receiving email from Salesforce, please check with your IT department or the person managing your system to ensure that:

  • Antivirus system is not blocking Salesforce emails (including how your rules and filters are setup)

  • Firewall is not blocking IPs





promote demote