Whitelisting Requirements For TIBCO Cloud™ Integration - Connect

Depending on the configuration of your network and the requirements of the applications being integrated, you may need to whitelist some IP addresses for successful communications. The sections below outline possible communication scenarios and provide the list of IP addresses that need to be whitelisted or URLs that need to be accessible for each case.

Note: TIBCO may update these IP addresses or URLs. Updates are made after posting a Release Notice and updating the TIBCO Cloud™ Services Status page. Best practice is to sign up for notifications from the TIBCO Cloud™ Services Status page.

Connect Cloud Agent

Connect cloud agents are hosted on the TIBCO Cloud™ Integration - Connect Cloud instance. If these agents are communicating with an application or system that is behind a firewall, you may need to whitelist the source IP addresses of our Connect cloud agents.

The data center your Organization is associated with determines which set of IP addresses needs to be whitelisted.

TIBCO Cloud™ Region

Data Center Provider

IP Addresses

AWS Australia (Sydney)

AWS Asia Pacific (Sydney)

ap-southeast-2

13.237.213.218

52.65.52.49

AWS Europe (Ireland)

AWS Europe (Frankfurt)

eu-central-1

35.157.107.151

52.59.173.145

AWS US East (N. Virginia)

AWS US East (N. Virginia)

us-east-1

34.200.113.156

44.209.127.61

AWS US West (Oregon)

AWS US East (N. Virginia)

us-east-1

52.6.65.166

52.21.2.156

Azure US (Washington)

Azure West US 2 (Washington)

52.137.93.65

40.91.89.158
Note: TIBCO Cloud™ Integration - Connect objects are hosted in their own separate data centers. However, when accessing those data centers through the TIBCO Cloud™ Integration User Interface, the region drop-down at the top of the page does not mention the data center only the region.

Connect On-Premise Agent

Connect on-premise agents are installed on a local server and handle all communication between TIBCO Cloud™ Integration - Connect and the source and target applications being integrated.

Capability

To retrieve instructions and update TIBCO Cloud™ Integration - Connect with its current status, the agent needs access to one or more of the following TIBCO Cloud™ Integration - Connect endpoints.

Note: For Connect on-premise agents, if you are using a data center other than the US data center, you must allow access to both your own data center and the US data center.
TIBCO Cloud™ Region

Data Center Provider

Endpoints

Static IP Addresses

AWS Australia (Sydney)

AWS Asia Pacific (Sydney)

ap-southeast-2

https://au1-connect-agent-aws.scribesoft.com

13.210.38.217

52.64.131.8

54.79.197.91

54.153.138.211

54.206.181.49

54.253.98.44

AWS Europe (Ireland)

AWS Europe (Frankfurt)

eu-central-1

https://agent-frankfurt.scribesoft.com

3.94.183.228

3.210.164.229

3.210.220.205

3.219.0.211

3.219.82.130

3.222.1.182

3.224.17.183

18.204.188.169

18.211.255.76

34.192.161.112

34.199.140.171

34.230.155.160

35.158.9.191

35.174.159.215

52.1.131.218

52.2.155.242

52.3.62.147

52.7.200.1

52.20.44.177

52.23.130.182

52.28.61.234

52.29.220.8

52.45.5.15

52.58.102.181

52.58.248.24

52.70.64.150

52.73.34.66

52.73.83.188

52.203.27.122

52.205.243.69

54.82.228.30

54.86.177.217

54.93.152.15

AWS US East (N. Virginia)

AWS US East (N. Virginia)

us-east-1

https://us-east.connect-agent.scribesoft.com

34.194.97.106

34.196.184.112

34.225.166.152

35.170.223.145

54.173.29.240

54.235.154.48

AWS US West (Oregon)

AWS US East (N. Virginia)

us-east-1

https://agent.scribesoft.com

18.205.138.48

34.197.135.234

34.197.203.69

34.199.76.224

34.233.74.136

34.237.69.78

34.238.209.108

54.83.87.1

54.84.110.228

54.86.129.180

54.88.106.171

AWS US West (Oregon)

AWS US East (N. Virginia)

us-east-1

Sandbox

https://sb-agent.scribesoft.com

3.213.67.3

3.229.207.198

34.198.237.167

34.224.153.250

52.204.244.28

54.146.195.161

Azure US (Washington)

Azure West US 2 (Washington)

https://us1-connect-agent-azure.scribesoft.com

13.77.173.116
Note: In TIBCO Cloud™ Integration Data Centers are referred to as Regions.

Ports

Agent communication is outbound from your environment to TIBCO Cloud™ Integration - Connect over port 443.

To communicate with TIBCO Cloud™ Integration - Connect on status and instructions in real-time the agent needs to attach to the TIBCO Cloud™ Integration - Connect Service Bus over ports 443, 5671, 5672, 9350, 9351, 9352, 9353, 9354 and requires access to the following URL: *.servicebus.windows.net

Refer to the following Knowledge Base article to validate that the Connect on-premise agent can connect to TIBCO Cloud™ Integration - Connect through the required ports: Check Ports In Agent Environment

Note: If your network policies prohibit you from opening these outbound ports, you can configure a Connect on-premise agent to poll for updates and only use https://agent.scribesoft.com, https://au1-connect-agent-aws.scribesoft.com, or https://agent-frankfurt.scribesoft.com. This option is not recommended and has performance implications. Contact TIBCO Support for assistance with this alternate configuration.

Firewall

If your business requires that you have the Connect on-premise agent installation behind a Proxy Server or a Firewall, the agent may not be able to communicate with TIBCO Cloud™ Integration - Connect or other Cloud applications. See Installing a Connect On-Premise Agent with Proxy Servers or Firewalls for detailed configuration instructions.

Applications Initiating Requests

Applications, such as Salesforce, that send requests to TIBCO Cloud™ Integration - Connect On event apps containing Request / Reply and Message flows must be able to access the one of following URLs to automatically route the request to the appropriate agent:

TIBCO Cloud™ Region

Data Center Provider

Endpoints

AWS Australia (Sydney)

AWS Asia Pacific (Sydney)

ap-southeast-2

https://au1-connect-endpoint-aws.scribesoft.com

AWS Europe (Ireland)

AWS Europe (Frankfurt)

eu-central-1

https://endpoint-frankfurt.scribesoft.com

AWS US East (N. Virginia)

AWS US East (N. Virginia)

us-east-1

https://us-east.connect-endpoint.scribesoft.com/

AWS US West (Oregon)

AWS US East (N. Virginia)

us-east-1

https://endpoint.scribesoft.com

Azure US (Washington)

Azure West US 2 (Washington)

https://us1-connect-endpoint-azure.scribesoft.com
Note: In TIBCO Cloud™ Integration Data Centers are referred to as Regions.

See Creating or Editing an On Event App and Setting Security Options.

Management API

Both TIBCO Cloud™ Integration - Connect end users who access the API swagger page and applications that leverage the TIBCO Cloud™ Integration - Connect API must be able to access the following endpoints: 

TIBCO Cloud™ Region

Data Center Provider

Endpoint

AWS Australia (Sydney)

AWS Asia Pacific (Sydney)

ap-southeast-2

https://au1-connect-api-aws.scribesoft.com

AWS US East (N. Virginia)

AWS US East (N. Virginia)

us-east-1

https://us-east.connect-api.scribesoft.com

AWS US West (Oregon)

AWS Europe (Ireland)

AWS US East (N. Virginia)
us-east-1

AWS Europe (Frankfurt)
eu-central-1

https://api.scribesoft.com

Azure US (Washington)

Azure West US 2 (Washington)

https://us1-connect-api-azure.scribesoft.com
Note: In TIBCO Cloud™ Integration Data Centers are referred to as Regions.

SSL Certificates

TIBCO Cloud™ Integration - Connect uses SSL certificates for secure communications between your browser and TIBCO Cloud™ Integration - Connect and between the agent and TIBCO Cloud™ Integration - Connect. To validate these certificates, your browser and agent need outbound access to port 80 and must be able to access the following URLs:

Related Topics

Requirements