Loading
Prepare for Email to Become the Default Login ExperienceRead More
Sales Productivity
Network Connection

Network Connection

When setting up Einstein Activity Capture with a Microsoft Exchange on-premises server (2019, 2016, or 2013) or Microsoft Office 365, make sure that you allow the necessary network access.

Required Editions

Available in: Lightning Experience
Available with Einstein Activity Capture Standard in Sales in Starter, Pro Suite, Professional, and Enterprise Editions
Available with Unlimited Edition, Einstein 1 Sales Edition, and Agentforce 1 Edition
Available with Einstein for Sales, which is included in Einstein 1 Sales Edition and available for an extra cost in Enterprise and Unlimited Editions
Available with Sales Engagement, which is included with Sales in Performance and Unlimited Editions, and available for an extra cost in Professional and Enterprise Editions
Available with Revenue Intelligence, which is available for an extra cost in Enterprise and Unlimited Editions
Important
Important Microsoft is retiring Exchange Web Services (EWS) in October 2026 for Microsoft Office 365, and Microsoft Graph API replaces EWS as a more advanced, secure, and scalable solution. Upgrade your connection to Microsoft Graph by October 1, 2026 to avoid sync disruptions in Einstein Activity Capture. See Upgrade Microsoft Office 365 Authentication Method to Microsoft Graph.

Inbound Connections

If an IP or VPN restricts the Exchange Web Services (EWS) endpoint, you must add these addresses to your allowlist so that your Exchange server is visible to Salesforce.

Important
Important To ensure uninterrupted access of your Einstein Activity Capture services and data, add both sets of IP addresses to your allowlist.
  If Your Salesforce Instance Is Outside of Europe If Your Salesforce Instance Is in Europe
Hyperforce
  • 44.242.15.232
  • 44.236.183.129
  • 100.21.196.196
  • 54.200.249.136
  • 44.228.8.56
  • 35.165.2.200
  • 18.158.21.76
  • 3.76.67.243
  • 18.158.241.92
  • 3.76.75.66
  • 52.57.103.81
  • 3.72.121.255

Depending on how you set up Salesforce, it can be necessary to add Salesforce IP addresses that aren’t specific to EWS or Einstein Activity Capture to your allowlist. To ensure continued access to Salesforce features, see Salesforce IP Addresses and Domains to Allow.

Outbound Connections

If your company restricts outbound connections, allow access to these domains. Exchange and Microsoft Office 365 sends push notifications to Salesforce when new emails and events arrive. To ensure uninterrupted service, add both sets of webhook endpoints to your allowlist.

  Connection If Your Salesforce Instance Is Outside of Europe If Your Salesforce Instance Is in Europe
Hyperforce Exchange Web Services apiq-ews-webhook-c01.sfdc-lywfpd.svc.sfdcfc.net apiq-ews-webhook-c01.sfdc-yzvdd4.svc.sfdcfc.net
apiq-ews-webhook-c02.sfdc-lywfpd.svc.sfdcfc.net
Microsoft Graph apiq-ms-gph-webhook-c01.apiq.sfdc-lywfpd.svc.sfdcfc.net apiq-ms-gph-webhook-c01.apiq.sfdc-yzvdd4.svc.sfdcfc.net
apiq-ms-gph-webhook-c02.apiq.sfdc-lywfpd.svc.sfdcfc.net
 
Loading
Salesforce Help | Article