---
schema_version: "1"
id: 9a37f6246fd2d72788226feda2348d668731f9313fc8babd478335da51775912
title: Network Connection
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sales/264-0-0/aac_setup_allow_access.md
canonical_url: https://help.salesforce.com/s/articleView?id=sales.aac_setup_allow_access.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 75838a94129297631ac7c6198fb3dbdc66667b00a8b9aaf20759175d658eeb37
description: When setting up Einstein Activity Capture with a Microsoft Exchange on-premises server (2019, 2016, or 2013) or Microsoft Office 365, make sure that you allow the necessary network access.
products:
  - Sales Cloud
  - Cross Cloud
  - Service Cloud Voice
release: "264"
---
# Network Connection

When setting up Einstein Activity Capture with a Microsoft Exchange on-premises server (2019, 2016, or 2013) or Microsoft Office 365, make sure that you allow the necessary network access.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Einstein Activity Capture Standard in Sales in <strong>Starter</strong>, <strong>Pro Suite</strong>, <strong>Professional</strong>, and <strong>Enterprise</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with <strong>Unlimited </strong>Edition, <strong>Einstein 1 Sales Edition</strong>, and <strong>Agentforce 1 Edition</strong></td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Einstein for Sales, which is included in <strong>Einstein 1 Sales Edition</strong> and available for an extra cost in <strong>Enterprise</strong> and <strong>Unlimited</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Sales Engagement, which is included with Sales in <strong>Performance</strong> and <strong>Unlimited</strong> Editions, and available for an extra cost in <strong>Professional</strong> and <strong>Enterprise</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Revenue Intelligence, which is available for an extra cost in <strong>Enterprise</strong> and <strong>Unlimited</strong> Editions</td></tr></tbody></table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_productivity-264-0-0-production-enus/b2f6c36a-fa61-4a3c-9752-032ce1818a69/images/icon_important.png)

Important Microsoft is retiring Exchange Web Services (EWS) in October 2026 for Microsoft Office 365, and Microsoft Graph API replaces EWS as a more advanced, secure, and scalable solution. Upgrade your connection to Microsoft Graph by October 1, 2026 to avoid sync disruptions in Einstein Activity Capture. See [Upgrade Microsoft Office 365 Authentication Method to Microsoft Graph](https://help.salesforce.com/s/articleView?id=sales.eac_ews_graph.htm&release=264.0.0&type=5 "Microsoft is retiring Exchange Web Services (EWS) for Microsoft Office 365 in October 2026. Microsoft Graph API replaces EWS. Upgrade the authentication method of Einstein Activity Capture, Inbox, and Lightning Sync to use Microsoft Graph to avoid service disruption.").

## Inbound Connections

If an IP or VPN restricts the Exchange Web Services (EWS) endpoint, add these addresses to your allowlist so that your Exchange server is visible to Salesforce.

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_productivity-264-0-0-production-enus/b2f6c36a-fa61-4a3c-9752-032ce1818a69/images/icon_important.png)

Important To ensure uninterrupted access of your Einstein Activity Capture services and data, add both sets of IP addresses to your allowlist.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
      <colgroup>
        <col style="width:14.285714285714285%">
        <col style="width:28.57142857142857%">
        <col style="width:28.57142857142857%">
        <col style="width:28.57142857142857%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d55579e161">Server</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d55579e164">If Your Salesforce Instance Is Outside of Europe or ANZ</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d55579e167">If Your Salesforce Instance Is in Europe, the Middle East, and Africa
            (EMEA)</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d55579e170">If Your Salesforce Instance Is in Australia and New Zealand (ANZ)</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="Server" class="slds-cell-wrap" style="vertical-align:top;" headers="d55579e161 ">Hyperforce</td>

          <td data-label="If Your Salesforce Instance Is Outside of Europe or ANZ" class="slds-cell-wrap" style="vertical-align:top;" headers="d55579e164 ">
            <ul>
              <li>44.242.15.232</li>

              <li>44.236.183.129</li>

              <li>100.21.196.196</li>

              <li>54.200.249.136</li>

              <li>44.228.8.56</li>

              <li>35.165.2.200</li>

            </ul>
          </td>

          <td data-label="If Your Salesforce Instance Is in Europe, the Middle East, and Africa (EMEA)" class="slds-cell-wrap" style="vertical-align:top;" headers="d55579e167 ">
            <ul>
              <li>18.158.21.76</li>

              <li>3.76.67.243</li>

              <li>18.158.241.92</li>

              <li>3.76.75.66</li>

              <li>52.57.103.81</li>

              <li>3.72.121.255</li>

            </ul>
          </td>

          <td data-label="If Your Salesforce Instance Is in Australia and New Zealand (ANZ)" class="slds-cell-wrap" style="vertical-align:top;" headers="d55579e170 ">
            <ul>
              <li>141.163.192.26</li>

              <li>141.163.192.24</li>

              <li>141.163.192.25</li>

              <li>141.163.193.242</li>

              <li>141.163.193.243</li>

              <li>141.163.193.27</li>

            </ul>
          </td>

        </tr>
      </tbody>
    </table>

Depending on how you set up Salesforce, it can be necessary to add Salesforce IP addresses that aren’t specific to EWS or Einstein Activity Capture to your allowlist. To ensure continued access to Salesforce features, see [Salesforce IP Addresses and Domains to Allow](https://help.salesforce.com/articleView?id=000003652&type=1&mode=1&language=en_US).

## Outbound Connections

If your company restricts outbound connections, allow access to these domains. Exchange and Microsoft Office 365 send push notifications to Salesforce when new emails and events arrive. To ensure uninterrupted service, add both sets of webhook endpoints to your allowlist.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:12.5%">
          <col style="width:12.5%">
          <col style="width:25%">
          <col style="width:25%">
          <col style="width:25%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d55579e300">&nbsp;</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d55579e302">Connection</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d55579e305">If Your Salesforce Instance Is Outside of Europe</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d55579e308">If Your Salesforce Instance Is in Europe, the Middle East, and Africa
              (EMEA)</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d55579e311">If Your Salesforce Instance Is in Australia and New Zealand (ANZ)</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="" class="slds-cell-wrap" rowspan="4" style="vertical-align:top;" headers="d55579e300 ">Hyperforce</td>

            <td data-label="Connection" class="slds-cell-wrap" rowspan="2" style="vertical-align:top;" headers="d55579e302 ">Exchange Web Services</td>

            <td data-label="If Your Salesforce Instance Is Outside of Europe" class="slds-cell-wrap" style="vertical-align:top;" headers="d55579e305 ">apiq-ews-webhook-c01.sfdc-lywfpd.svc.sfdcfc.net</td>

            <td data-label="If Your Salesforce Instance Is in Europe, the Middle East, and Africa (EMEA)" class="slds-cell-wrap" rowspan="2" style="vertical-align:top;" headers="d55579e308 ">apiq-ews-webhook-c01.sfdc-yzvdd4.svc.sfdcfc.net</td>

            <td data-label="If Your Salesforce Instance Is in Australia and New Zealand (ANZ)" class="slds-cell-wrap" rowspan="2" style="vertical-align:top;" headers="d55579e311 ">apiq-ews-webhook-c01.sfdc-vwfla6.svc.sfdcfc.net</td>

          </tr>
          <tr class="">
            <td data-label="If Your Salesforce Instance Is Outside of Europe" class="slds-cell-wrap" style="vertical-align:top;" headers="d55579e305 ">apiq-ews-webhook-c02.sfdc-lywfpd.svc.sfdcfc.net</td>

          </tr>
          <tr class="">
            <td data-label="Connection" class="slds-cell-wrap" rowspan="2" style="vertical-align:top;" headers="d55579e302 ">Microsoft Graph</td>

            <td data-label="If Your Salesforce Instance Is Outside of Europe" class="slds-cell-wrap" style="vertical-align:top;" headers="d55579e305 ">apiq-ms-gph-webhook-c01.apiq.sfdc-lywfpd.svc.sfdcfc.net</td>

            <td data-label="If Your Salesforce Instance Is in Europe, the Middle East, and Africa (EMEA)" class="slds-cell-wrap" rowspan="2" style="vertical-align:top;" headers="d55579e308 ">apiq-ms-gph-webhook-c01.apiq.sfdc-yzvdd4.svc.sfdcfc.net</td>

            <td data-label="If Your Salesforce Instance Is in Australia and New Zealand (ANZ)" class="slds-cell-wrap" rowspan="2" style="vertical-align:top;" headers="d55579e311 ">apiq-ms-gph-webhook-c01.apiq.sfdc-vwfla6.svc.sfdcfc.net</td>

          </tr>
          <tr class="">
            <td data-label="If Your Salesforce Instance Is Outside of Europe" class="slds-cell-wrap" style="vertical-align:top;" headers="d55579e305 ">apiq-ms-gph-webhook-c02.apiq.sfdc-lywfpd.svc.sfdcfc.net</td>

          </tr>
        </tbody>
      </table>

#### See Also

- [Connect Einstein Activity Capture to Microsoft Office 365 using User-Level Authentication](https://help.salesforce.com/s/articleView?id=sales.aac_setup_user_level_connection.htm&release=264.0.0&type=5 "The user-level authentication method is available for Microsoft Exchange on-premises servers and Microsoft Office 365. After users are assigned to Einstein Activity Capture, they’re prompted to connect their Microsoft account to Salesforce.")
- [Use a Service Account to Connect an Exchange On-Premises Server to Einstein Activity Capture](https://help.salesforce.com/s/articleView?id=sales.aac_setup_service_account_on_prem.htm&release=264.0.0&type=5 "If your company uses Microsoft Exchange 2019, 2016, or 2013 on-premises, you can connect to Einstein Activity Capture by using a service account. The Salesforce admin works with their Exchange admin to create a service account with the impersonation role and give Salesforce access to the service account user’s data. By using a service account, you can scope authentication to a specific set of users and set up all Einstein Activity Capture users at the same time.")