---
schema_version: "1"
id: b42274982546e2f0d4a6ef324ff228234e3ebca12e0e8fe473c1b5e02c301c5f
title: IP Addresses for Inclusion on Allowlists in Marketing Cloud Intelligence
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/dato_getstarted_whitelist.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.dato_getstarted_whitelist.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 31e3131fbc2c0769ca750cef2a64c10347208a79b1821edd7a74d90a5fad767a
description: Sometimes you need to set up a data stream via an SQL service provider or an FTPS. If you have a firewall in place, you must allow specific IP addresses to ensure data is retrieved.
products:
  - Marketing
  - Marketing Cloud Intelligence
release: "264"
---
# IP Addresses for Inclusion on Allowlists in Marketing Cloud Intelligence

Sometimes you need to set up a data stream via an SQL service provider or an FTPS. If you have a firewall in place, you must allow specific IP addresses to ensure data is retrieved.

This table describes which IP addresses must be allowed in the firewall (according to service and environment).

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-salesforce_datorama-264-0-0-production-enus/d38a342d-dd4a-4af8-8343-f372280a75dd/images/icon_note.png)

Note PROD-US2 and PROD-EU2 are Azure environments. Some services have two IP addresses that need to be allowed, make sure you allow both IP addresses.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:20%">
          <col style="width:20%">
          <col style="width:20%">
          <col style="width:20%">
          <col style="width:20%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d24815e51">Service</th>
            <th scope="colgroup" class="slds-cell-wrap" colspan="4" style="text-align:center;vertical-align:top;" id="d24815e54">Environment</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Service" class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e51 ">&nbsp;</td>

            <td data-label="Environment" class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">PROD - US</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">PROD - US2</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">PROD - EU</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">PROD - EU2</td>

          </tr>
          <tr class="">
            <td data-label="Service" class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e51 ">Python Integration</td>

            <td data-label="Environment" class="slds-cell-wrap" colspan="4" style="text-align:center;vertical-align:top;" headers="d24815e54 ">
              <p>34.195.192.26</p>
              <p style="margin-bottom:0;">52.0.230.128</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Service" class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e51 ">Data Import and Data Export Services</td>

            <td data-label="Environment" class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">
              <p>54.163.226.11</p>
              <p>54.83.10.143</p>
              <p style="margin-bottom:0;">54.227.219.146</p>
            </td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">
              <p>20.41.43.59</p>
              <p>20.44.73.165</p>
              <p style="margin-bottom:0;">40.65.212.209</p>
            </td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">
              <p>35.157.8.65</p>
              <p style="margin-bottom:0;">54.93.174.35</p>
            </td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">
              <p>40.67.249.123</p>
              <p>52.155.226.154</p>
              <p style="margin-bottom:0;">52.155.230.152</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Service" class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e51 ">Reserved External IP (see note)</td>

            <td data-label="Environment" class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">&nbsp;</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">
              <p>20.69.195.34</p>
              <p>20.69.196.125</p>
              <p>20.69.196.152</p>
              <p>20.69.196.150</p>
              <p style="margin-bottom:0;">20.69.196.108</p>
            </td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">&nbsp;</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">
              <p>20.67.202.77</p>
              <p>20.67.202.79</p>
              <p>20.67.202.98</p>
              <p>20.67.202.111</p>
              <p style="margin-bottom:0;">20.67.202.90</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Service" class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e51 ">VPC S3 Endpoint ID</td>

            <td data-label="Environment" class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">vpce-7e4ef417</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">&nbsp;</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">vpce-f678ba9f</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d24815e54 ">&nbsp;</td>

          </tr>
        </tbody>
      </table>

## Important Information

- Azure uses Azure Storage Service Endpoints in all subnets to optimize and secure access. When accessing Azure Storage, the traffic comes from Marketing Cloud Intelligence’s internal Azure IP addresses. When using a firewall on the Azure Portal, you can only allow private IP address ranges and VNETS that belong to the same account. One possible workaround for this issue, is to set up an SFTP server in your VNET and have Marketing Cloud Intelligence send reports to that server. See _Microsoft Learn_: [Azure virtual network service endpoints](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview). Another workaround is to run a command in Cloud Shell in the Azure Portal or locally (requires Azure CLI).
    
    The subnet ID for Azure US is:
    
    `az storage account network-rule add --account-name  <inputaccountname> --subnet /subscriptions/009fdd36-efea-4a4a-a0ec-173c31f6122a/resourceGroups/Networking-RG/providers/Microsoft.Network/virtualNetworks/Prod-VNET/subnets/aks-prod-us2-green   az storage account network-rule add --account-name  <inputaccountname> --subnet /subscriptions/009fdd36-efea-4a4a-a0ec-173c31f6122a/resourceGroups/Networking-RG/providers/Microsoft.Network/virtualNetworks/Prod-VNET/subnets/aks-prod-us2-blue`
    
    Microsoft.Network/virtualNetworks/Prod-IE-VNET/subnets/SF-K8S-EU2-G3-node is the ID of our subnet on Azure EU. The subnet ID for Azure EU is:
    
    ```
    az storage account network-rule add --account-name 
    <inputaccountname> --subnet /subscriptions/a6dcb2d5-c7e2-488d-9187-c8d8e5b68789/resourceGroups/Prod-IE-RG/providers/Microsoft.Network/virtualNetworks/Prod-IE-VNET/subnets/aks-prod-eu2-green
     
    az storage account network-rule add --account-name 
    <inputaccountname> --subnet /subscriptions/a6dcb2d5-c7e2-488d-9187-c8d8e5b68789/resourceGroups/Prod-IE-RG/providers/Microsoft.Network/virtualNetworks/Prod-IE-VNET/subnets/aks-prod-eu2-blue
    
    ```
- **Reserved External IP** - If you’re in the Azure environment, allow these IP addresses as well, due to future updates to the Azure IP addresses.
- Marketing Cloud Intelligence relies on a technology called websockets to be enabled in order for the platform to work correctly. Some IT departments restrict communication via websockets, and this can lead to dashboards not loading correctly or at all. To test if websockets are enabled, navigate to [https://websocketstest.com/](https://websocketstest.com/). If for some reason they aren’t working correctly, contact your IT department. If you encounter problems despite websockets being allowed in your environment, then contact Marketing Cloud Intelligence support.
- For Amazon S3 services, when the client's bucket is located in the same region as Marketing Cloud Intelligence’s bucket, the client should whitelist the VPC endpoints instead of the public IP's (as described in the table above). For more information, see [Controlling Access from VPC Endpoints with Bucket Policies](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies-vpc-endpoint.html)
    
    These are the available regions:
    
    - (AWS US) is in Amazon region us-east-1
    - AWS EU) is in Amazon region eu-central-1