Service IP addresses and ports

For correct operation of USS, the following IP addresses and ports must be allowed for outbound connections through the corporate firewall or security appliance on your network(s).

Web Security & CASB Inline service

The filtering service is available on ports 1344 & 1345, or 80 & 443.

The ICAP hostname address may contain some or all of the IP addresses from the below table depending on the licensed region.

This table is provided for reference only. It is not recommended to restrict or limit access to the ICAP hostname via local firewall. IP addresses are subject to change.

Host

Region

IPv4 address

Location

icap-global.clouduss.com

icap-uk.clouduss.com

Global

United Kingdom

18.130.17.218

United Kingdom

icap-global.clouduss.com

icap-uk.clouduss.com

Global

United Kingdom

18.134.201.23

United Kingdom

icap-global.clouduss.com

icap-uk.clouduss.com

Global

United Kingdom

18.135.83.163

United Kingdom

icap-uk2.clouduss.com

United Kingdom

18.168.238.177

United Kingdom

icap-uk2.clouduss.com

United Kingdom

18.169.42.8

United Kingdo

icap-uk2.clouduss.com

United Kingdom

18.134.31.105

United Kingdom

icap-uk3.clouduss.com

United Kingdom

13.43.175.98

United Kingdom

icap-uk3.clouduss.com

United Kingdom

35.179.188.168

United Kingdom

icap-uk3.clouduss.com

United Kingdom

13.43.128.164

United Kingdom

icap-uk4.clouduss.com

Global

United Kingdom

13.41.244.132

United Kingdom

icap-uk4.clouduss.com

United Kingdom

18.132.30.112

United Kingdom

icap-uk4.clouduss.com

United Kingdom

13.42.192.111

United Kingdom

icap-global.clouduss.com

icap-europe.clouduss.com

Global

Europe

3.65.159.28

Germany

icap-global.clouduss.com

icap-europe.clouduss.com

Global

Europe

3.123.120.12

Germany

icap-global.clouduss.com

icap-europe.clouduss.com

Global

Europe

18.158.198.117

Germany

icap-global.clouduss.com

icap-europe.clouduss.com

Global

Europe

13.48.119.1

Germany

icap-global.clouduss.com

icap-usa.clouduss.com

Global

North America

18.214.69.201

United States

icap-global.clouduss.com

icap-usa.clouduss.com

Global

North America

184.169.215.147

United States

icap-global.clouduss.com

icap-usa.clouduss.com

Global

North America

35.173.96.59

United States

icap-global.clouduss.com

icap-usa.clouduss.com

Global

North America

52.9.13.34

United State

icap-global.clouduss.com

Global

52.65.50.110

Australia

icap-global.clouduss.com

Global

13.245.133.64

South Africa

icap-global.clouduss.com

icap-europe.clouduss.com

Global

Europe

13.53.163.31

Sweden

icap-global.clouduss.com

Global

13.115.83.141

Japan

icap-global.clouduss.com

icap-me.clouduss.com

Global

Middle East

3.28.180.69

Dubai

icap-global.clouduss.com

Global

3.109.169.193

India

Email Security service

The SMTP service is available on ports 25 & 587

United Kingdom & Europe

51.140.50.9

23.97.185.122

52.28.195.233

104.40.205.111

52.28.207.52

46.137.91.239

46.51.191.66

46.51.184.151

52.29.103.252

40.115.45.200

40.115.43.250

United States

104.214.75.142

52.200.11.158

104.214.75.99

52.200.119.29

3.226.109.248

United Arab Emirates

40.119.164.85

40.119.165.108

40.123.214.7

India

20.198.113.245

20.198.118.206

Outlook Add-In

Hostname

Port

clientaddin.clouduss.com

443

Compliant Email Archive Service

EU IP address

UK IP address

3.121.93.215

18.135.120.102

3.121.119.215

18.135.8.190

52.57.205.55

18.170.145.242

Hostname

Port

linkscan.io, v2.linkscan.io

443

api.linkscan.io

443

fonts.googleapis.com, use.fontawesome.com

443

Regional data storage

You log data can be stored in the following regions:

Region

United Kingdom - London, United Kingdom

Europe - Frankfurt, Germany

United States - North California, United States

India - Delhi, India

API & Services

Hostname

IP address(es)

Port(s)

apiv2.clouduss.com

169.50.64.144

443

agentservice.clouduss.com

Dynamic

443

logs.clouduss.com

Dynamic

443

User synchronisation

Active Directory synchronisation can operate in two modes. Cloud Sync mode uses the Microsoft Graph API to connect to your Azure Active Directory tenant. Local Sync, on the other hand, pushes AD objects out via HTTPS and is unlikely to require any firewall changes, unless outbound traffic is resricted from the network. LDAP(S) access may be required if a firewall is between your AD Connect client and your Domain Controller. The table below details the IP address and port information used by both methods.

Service

Direction

IP address

Port(s)

Local Sync (push)

Outbound

3.69.68.114, 18.198.13.107

443

How did we do?