{ "version": "1.4.0", "updated_at": "2026-04-13T00:00:00Z", "description": "Delinea Platform and Secret Server Cloud IP Allowlist", "region_codes": { "global": "All regions", "us": "United States", "au": "Australia", "ca": "Canada", "eu": "Europe", "sea": "Southeast Asia", "uae": "United Arab Emirates", "uk": "United Kingdom" }, "outbound": { "description": "Outbound Traffic from your network to Delinea Platform/SSC", "items": [ { "id": "web_front_end", "description": "Platform primary HTTP endpoint. Replace with your tenant name. IP ranges are WAF (Web Application Firewall) addresses shared across all regions.", "protocol": "tcp", "ports": [443], "regions": { "global": { "hostnames": [ ".delinea.app" ], "ipv4": [ "199.83.128.0/21", "198.143.32.0/19", "149.126.72.0/21", "103.28.248.0/22", "185.11.124.0/22", "192.230.64.0/18", "45.64.64.0/22", "107.154.0.0/16", "45.60.0.0/16", "45.223.0.0/16", "131.125.128.0/17" ], "ipv6": [ "2a02:e980::/29" ] }, "us": { "hostnames": [ ".secretservercloud.com" ] }, "au": { "hostnames": [ ".secretservercloud.com.au" ] }, "ca": { "hostnames": [ ".secretservercloud.ca" ] }, "eu": { "hostnames": [ ".secretservercloud.eu" ] }, "sea": { "hostnames": [ ".secretservercloud.com.sg" ] }, "uae": { "hostnames": [ ".secretservercloud.ae" ] }, "uk": { "hostnames": [ ".secretservercloud.co.uk" ] } } }, { "id": "platform_ad_connector_tcp_relays", "description": "Delinea Platform AD Connector TCP Relay endpoints. US region has both legacy self-signed (*.cloudapp.azure.com) and CA-signed (*.delinea.app) hostnames; other regions use self-signed only.", "protocol": "tcp", "ports": [443], "regions": { "us": { "ipv4": [ "20.242.252.136/29", "52.148.145.72/29", "20.85.110.128/29" ], "hostnames": [ "tcpr-linux-eastus-01.eastus.cloudapp.azure.com", "tcpr-linux-eastus-02.eastus.cloudapp.azure.com", "tcpr-linux-westus2-01.westus2.cloudapp.azure.com", "tcpr-linux-westus2-02.westus2.cloudapp.azure.com", "tcpr-linux-eastus-signed-01.identity.services.delinea.app", "tcpr-linux-westus2-signed-01.identity.services.delinea.app" ] }, "au": { "ipv4": [ "20.211.60.240/29" ], "hostnames": [ "tcpr-linux-australiaeast-01.australiaeast.cloudapp.azure.com", "tcpr-linux-australiaeast-02.australiaeast.cloudapp.azure.com" ] }, "ca": { "ipv4": [ "20.104.14.80/29" ], "hostnames": [ "tcpr-linux-canadacentral-01.canadacentral.cloudapp.azure.com", "tcpr-linux-canadacentral-02.canadacentral.cloudapp.azure.com" ] }, "eu": { "ipv4": [ "20.8.3.112/29" ], "hostnames": [ "tcpr-linux-westeurope-01.westeurope.cloudapp.azure.com", "tcpr-linux-westeurope-02.westeurope.cloudapp.azure.com", "tcpr-linux-westeurope-signed-01.identity.services.delinea.app", "tcpr-linux-westeurope-signed-02.identity.services.delinea.app" ] }, "sea": { "ipv4": [ "20.195.89.80/29" ], "hostnames": [ "tcpr-linux-eastasia-01.eastasia.cloudapp.azure.com", "tcpr-linux-eastasia-02.eastasia.cloudapp.azure.com" ] }, "uae": { "ipv4": [ "20.203.77.200/29" ], "hostnames": [ "tcpr-linux-uaenorth-01.uaenorth.cloudapp.azure.com", "tcpr-linux-uaenorth-02.uaenorth.cloudapp.azure.com" ] }, "uk": { "ipv4": [ "20.49.210.72/29" ], "hostnames": [ "tcpr-linux-uksouth-01.uksouth.cloudapp.azure.com", "tcpr-linux-uksouth-02.uksouth.cloudapp.azure.com" ] } } }, { "id": "distributed_engine_service_bus", "description": "Distributed Engine Service Bus endpoints. Tenant-specific URLs available at https://.delinea.app/view/vault/diagnostics/system/service-bus. Port 443 (WebSocket, default) or 5671 (AMQP) is required depending on your connectivity configuration. For a full list of Service Bus IP addresses, refer to the official Microsoft documentation at https://www.microsoft.com/en-us/download/details.aspx?id=56519.", "protocol": "tcp", "ports": [443, 5671], "regions": { "us": { "hostnames": [ "ssc-sb-us-01-prod-er.servicebus.windows.net", "ssc-sb-us-02-prod-er.servicebus.windows.net" ] }, "eu": { "hostnames": [ "ssc-sb-eu-01-prod-er.servicebus.windows.net", "ssc-sb-eu-02-prod-er.servicebus.windows.net" ] }, "au": { "hostnames": [ "ssc-sb-au-01-prod-er.servicebus.windows.net", "ssc-sb-au-02-prod-er.servicebus.windows.net" ] }, "uk": { "hostnames": [ "ssc-sb-uk-01-prod-er.servicebus.windows.net", "ssc-sb-uk-02-prod-er.servicebus.windows.net" ] }, "sea": { "hostnames": [ "ssc-sb-sea-01-prod-er.servicebus.windows.net", "ssc-sb-sea-02-prod-er.servicebus.windows.net" ] }, "ca": { "hostnames": [ "ssc-sb-ca-01-prod-er.servicebus.windows.net", "ssc-sb-ca-02-prod-er.servicebus.windows.net" ] }, "uae": { "hostnames": [ "ssc-sb-uae-01-prod-er.servicebus.windows.net", "ssc-sb-uae-02-prod-er.servicebus.windows.net" ] } } }, { "id": "platform_engine_messaging", "description": "Platform Engine messaging endpoints.", "protocol": "tcp", "ports": [443], "regions": { "us": { "ipv4": [ "52.242.80.40", "20.10.19.233", "52.242.83.134", "52.232.176.191", "52.232.190.42", "13.68.103.82", "52.254.67.13", "52.251.121.216", "52.247.66.13", "172.172.125.108", "52.177.177.218", "51.8.169.100" ], "hostnames": [ "dramatic-coral-crow.rmq2.cloudamqp.com", "loud-beige-duckbill.rmq5.cloudamqp.com", "fast-green-crab.rmq2.cloudamqp.com", "bobbish-coral-anteater.rmq4.cloudamqp.com", "messaging01-us.engine-pool.services.delinea.app", "messaging02-us.engine-pool.services.delinea.app", "messaging03-us.engine-pool.services.delinea.app", "messaging04-us.engine-pool.services.delinea.app" ] }, "au": { "ipv4": [ "20.213.162.246", "4.197.108.187", "20.28.221.18" ], "hostnames": [ "technical-blond-elk.rmq2.cloudamqp.com", "messaging01-au.engine-pool.services.delinea.app" ] }, "ca": { "ipv4": [ "20.151.204.74", "20.104.49.33", "20.220.190.75" ], "hostnames": [ "smart-orange-gibbon.rmq2.cloudamqp.com", "messaging01-ca.engine-pool.services.delinea.app" ] }, "eu": { "ipv4": [ "40.113.116.168", "13.95.134.152", "13.93.28.72" ], "hostnames": [ "young-azure-hare.rmq2.cloudamqp.com", "messaging01-eu.engine-pool.services.delinea.app" ] }, "sea": { "ipv4": [ "20.205.1.170", "104.208.75.225", "20.205.1.36" ], "hostnames": [ "hippy-fuchsia-woodpecker.rmq2.cloudamqp.com", "metallic-plum-duck.rmq5.cloudamqp.com", "messaging01-sea.engine-pool.services.delinea.app" ] }, "uae": { "ipv4": [ "74.243.245.247", "20.74.202.242", "74.243.243.217" ], "hostnames": [ "alert-brown-dinosaur.rmq6.cloudamqp.com", "messaging01-uae.engine-pool.services.delinea.app" ] }, "uk": { "ipv4": [ "20.108.179.191", "13.87.86.96", "20.0.184.97" ], "hostnames": [ "giant-maroon-bullfrog.rmq3.cloudamqp.com", "messaging01-uk.engine-pool.services.delinea.app" ] } } }, { "id": "storage", "description": "Engine storage, binary downloads, and authorization service file storage.", "protocol": "tcp", "ports": [443], "regions": { "global": { "hostnames": [ "enginepoolupdateprod.blob.core.windows.net", "enginepool-downloads-prod.azureedge.net", "downloads.engine-pool.services.delinea.app", "authstorprod8138094.blob.core.windows.net" ] } } }, { "id": "signalr", "description": "SignalR for auditing, authorization, policy-services, and workflow-services.", "required": false, "protocol": "tcp", "ports": [443], "regions": { "global": { "hostnames": [ "auditing-prod-signalr.service.signalr.net", "auditing-signalr-ha-6843347.service.signalr.net", "auditing-signalr-ha-6843347-secondary.service.signalr.net", "authorization-signalr-prod-12243695.service.signalr.net", "authorization-signalr-prod-16295514.service.signalr.net", "authorization-signalr-prod-16295514-secondary.service.signalr.net", "policy-services-signalr-prod-10782127.service.signalr.net", "policy-services-signalr-prod-10782127-secondary.service.signalr.net", "workflow-services-signalr-prod-14090949.service.signalr.net", "workflow-services-signalr-prod-14090949-secondary.service.signalr.net" ] } } }, { "id": "tls_certificate_validation", "description": "Certificate validation for CRL and OCSP. Required for TLS certificate validation.", "protocol": "tcp", "ports": [80], "regions": { "global": { "hostnames": [ "*.digicert.com", "*.lencr.org", "*.microsoft.com", "*.sectigo.com" ] } } }, { "id": "platform_marketplace", "description": "The Platform Marketplace contains links and downloads hosted by Delinea or third parties. The Marketplace will continually evolve and listing all possible hostnames would not be feasible. Add exceptions as-needed for each Marketplace link or download.", "required": false, "protocol": "tcp", "ports": [443] } ] }, "inbound": { "description": "Traffic from Delinea Platform/SSC to Customer network (allow these source IPs on your firewall)", "items": [ { "id": "radius", "description": "RADIUS authentication egress IPs. Each region includes both primary and DR ranges. Ranges consolidated as of October 2024.", "required": false, "protocol": "udp", "ports": [1812, 1813], "regions": { "us": { "ipv4": [ "20.228.138.112/29", "52.190.184.16/29" ] }, "au": { "ipv4": [ "20.37.1.16/29", "23.101.211.80/29" ] }, "ca": { "ipv4": [ "40.85.220.216/29", "20.220.90.80/29" ] }, "eu": { "ipv4": [ "51.116.178.152/29", "20.16.113.88/29" ] }, "sea": { "ipv4": [ "52.237.113.56/29", "23.100.88.144/29" ] }, "uae": { "ipv4": [ "40.123.217.216/29", "40.126.216.216/29" ] }, "uk": { "ipv4": [ "20.162.162.64/29", "20.117.16.40/29" ] } } }, { "id": "notifications", "description": "Notification service egress IPs. AWS SES used for email notifications.", "protocol": "tcp", "ports": [25, 587, 465], "regions": { "us": { "ipv4": [ "54.240.75.72", "54.240.75.73" ] }, "au": { "ipv4": [ "76.223.131.80", "76.223.131.81" ] }, "ca": { "ipv4": [ "54.240.81.24", "54.240.81.25" ] }, "eu": { "ipv4": [ "54.240.98.81", "54.240.98.82" ] }, "sea": { "ipv4": [ "216.221.165.52", "216.221.165.53" ] }, "uae": { "ipv4": [ "206.55.146.14", "206.55.146.15" ] }, "uk": { "ipv4": [ "76.223.133.140", "76.223.133.141" ] } } }, { "id": "webhooks", "description": "Webhook egress IPs.", "required": false, "protocol": "tcp", "ports": [443], "regions": { "us": { "ipv4": [ "13.68.202.64/29", "172.203.27.16/29" ] }, "au": { "ipv4": [ "23.101.212.8/29", "20.11.207.32/29" ] }, "ca": { "ipv4": [ "40.85.216.32/29", "40.86.243.40/29" ] }, "eu": { "ipv4": [ "108.143.39.32/29", "137.116.238.240/29" ] }, "sea": { "ipv4": [ "104.215.150.80/29", "23.100.88.32/29" ] }, "uae": { "ipv4": [ "40.123.218.160/29", "20.45.67.96/29" ] }, "uk": { "ipv4": [ "51.140.10.160/29", "20.90.1.200/29" ] } } } ] } }