Service IP addresses and ports
For correct operation of USS, the following IP addresses and ports must be allowed for outbound connections through the corporate firewall or security appliance on your network(s).
Web Security & CASB Inline service
The filtering service is available on ports 1344 & 1345, or 80 & 443.
The ICAP hostname address may contain some or all of the IP addresses from the below table depending on the licensed region.
Host | Region | IPv4 address | Location |
icap-global.clouduss.com icap-uk.clouduss.com | Global United Kingdom | 18.130.17.218 | United Kingdom |
icap-global.clouduss.com icap-uk.clouduss.com | Global United Kingdom | 18.134.201.23 | United Kingdom |
icap-global.clouduss.com icap-uk.clouduss.com | Global United Kingdom | 18.135.83.163 | United Kingdom |
icap-global.clouduss.com icap-europe.clouduss.com | Global Europe | 3.65.159.28 | Germany |
icap-global.clouduss.com icap-europe.clouduss.com | Global Europe | 3.123.120.12 | Germany |
icap-global.clouduss.com icap-europe.clouduss.com | Global Europe | 18.158.198.117 | Germany |
icap-global.clouduss.com icap-europe.clouduss.com | Global Europe | 13.48.119.1 | Germany |
icap-global.clouduss.com icap-usa.clouduss.com | Global North America | 18.214.69.201 | United States |
icap-global.clouduss.com icap-usa.clouduss.com | Global North America | 184.169.215.147 | United States |
icap-global.clouduss.com icap-usa.clouduss.com | Global North America | 35.173.96.59 | United States |
icap-global.clouduss.com icap-usa.clouduss.com | Global North America | 52.9.13.34 | United State |
icap-global.clouduss.com | Global | 52.65.50.110 | Australia |
icap-global.clouduss.com | Global | 13.245.133.64 | South Africa |
icap-global.clouduss.com icap-europe.clouduss.com | Global Europe | 13.53.163.31 | Sweden |
icap-global.clouduss.com | Global | 13.115.83.141 | Japan |
icap-global.clouduss.com icap-me.clouduss.com | Global Middle East | 3.28.180.69 | Dubai |
icap-global.clouduss.com | Global | 3.109.169.193 | India |
Email Security service
The SMTP service is available on ports 25 & 587
United Kingdom & Europe | 51.140.50.9 23.97.185.122 52.28.195.233 104.40.205.111 52.28.207.52 46.137.91.239 46.51.191.66 46.51.184.151 52.29.103.252 40.115.45.200 40.115.43.250 |
United States | 104.214.75.142 52.200.11.158 104.214.75.99 52.200.119.29 3.226.109.248 |
United Arab Emirates | 40.119.164.85 40.119.165.108 40.123.214.7 |
India | 20.198.113.245 20.198.118.206 |
Outlook Add-In
Hostname | Port |
clientaddin.clouduss.com | 443 |
Compliant Email Archive Service
IP address |
3.121.93.215 |
3.121.119.215 |
52.57.205.55 |
LinkScan Service
Hostname | Port |
linkscan.io, v2.linkscan.io | 443 |
api.linkscan.io | 443 |
fonts.googleapis.com, use.fontawesome.com | 443 |
Regional data storage
You log data can be stored in the following regions:
Region |
United Kingdom - London, United Kingdom |
Europe - Frankfurt, Germany |
United States - North California, United States |
India - Delhi, India |
API & Services
Hostname | IP address(es) | Port(s) |
apiv2.clouduss.com | 169.50.64.144 | 443 |
agentservice.clouduss.com | Dynamic | 443 |
logs.clouduss.com | Dynamic | 443 |
User synchronisation
Active Directory synchronisation can operate in two modes. Cloud Sync mode uses the Microsoft Graph API to connect to your Azure Active Directory tenant. Local Sync, on the other hand, pushes AD objects out via HTTPS and is unlikely to require any firewall changes, unless outbound traffic is resricted from the network. LDAP(S) access may be required if a firewall is between your AD Connect client and your Domain Controller. The table below details the IP address and port information used by both methods.
Service | Direction | IP address | Port(s) |
Local Sync (push) | Outbound | 3.69.68.114, 18.198.13.107 | 443 |