Account Engagement IP Addresses and Ranges to Allowlist

Account Engagement Web Application / Hosting IP Addresses

Note:

• The changes described below will not impact the Salesforce-Account Engagement Connector, and do not require any change in your Salesforce org. The network access controls mentioned refer to any restrictions placed on your network by your IT team. Network Access and Profile Login IP Range restrictions in Salesforce are unaffected.
• If there are no IP-based restrictions on your internal network, no action is required.

Effective March 1, 2022, Account Engagement no longer publishes IP addresses that are used to serve the Account Engagement web application, its API, or any of its capabilities (such as landing pages). Customers who implement network access controls attempting to restrict browser or API client access using IP address allowlists may experience unintended service disruptions accessing Account Engagement.
Should this occur, check with your internal network team to determine if connection attempts to *.pardot.com (such as pi.pardot.com) or *.pardot.force.com hostnames are being blocked, and allow these.

In preparation for this change, your IT team may remove the following previously recommended IP ranges from your internal network allowlists, and instead allow connections to the hostnames mentioned above:
 

• 136.147.104.20 to 136.147.104.23
• 136.147.96.20 to 136.147.96.23
• All IP Addresses listed in the “Account Engagement CRM Sync Public IP Addresses” section below

Account Engagement CRM Sync Public IP Addresses

This is a list of IPs Account Engagement uses to communicate with Salesforce. This is not meant to be an exhaustive list of all Account Engagement IPs, nor does it include any Account Engagement email sending IPs.
If your CRM is configured to limit login access by IP address, please ensure that the following IP addresses are added to the allowlist in your Account Engagement Connector user's profile.
52.202.69.186
52.21.178.134
35.174.150.168
35.174.151.106
35.174.78.146
18.232.28.189
18.236.48.198
35.160.68.143
35.162.236.194
34.213.32.13
35.164.254.110
52.42.59.7
18.232.248.67
35.174.85.220
52.21.28.50
35.172.247.215
34.208.83.105
35.164.251.63
35.164.165.226
34.218.141.17
52.20.28.237
34.193.125.247

Note: Salesforce may request that the IPs be in the format of ranges, not single IPs. If so, add the same IP for the first and last value of the range. For instructions on the process of adding to an allowlist, you can refer to our documentation:

• Original Profile User Interface
• Enhanced Profile User Interface

For all other Salesforce Connector for Account Engagement troubleshooting guidance, please refer to the Salesforce Connector Troubleshooting article.

Notice Regarding File Upload Functionality

If your local network implements allowlists and you are unable to upload files to Account Engagement, your network may need to allowlist the domains for our content delivery network, Amazon Web Services, Inc. (AWS). The following domain name patterns need to be allowed: *.s3.amazonaws.com and *.cloudfront.net

To view all other IP addresses and ranges related to Salesforce, please see Salesforce IP Addresses and Domains to Allow.