Make sure that your real-time messaging services have stable connectivity by configuring your IT and network security settings.
Required Editions
| User Permissions | |
|---|---|
| To manage connections and handle messaging sessions: |
|
| To reply or transfer conversations: | Access Conversation Entries permission. This permission is available via the Service Cloud Voice User license or the Agentforce Service Agent User license. |
Apply these rules to the ORGSUBDOMAINHERE.my.salesforce-scrt.com domain. Apply these settings across all network layers, including endpoint security software, such as antivirus programs, and browser extensions that act as local proxies.
- Firewall and proxy allowlisting: Permit outbound HTTPS traffic on Port 443 for the domain. Apply this rule to firewalls, load balancers, and VPNs.
- Disable SSL and TLS inspection: Create an SSL bypass rule, or HTTPS inspection exemption, for this domain. This bypass prevents the security engine from intercepting and buffering the real-time stream.
- Disable response buffering: Configure proxies and gateways to stream responses rather than buffer them.
- Connection timeouts: Set the connection timeout to at least 75 minutes. We recommend 90 minutes. This timeout setting prevents the network from prematurely cutting the open line.
Set Up CORS for Server-Sent Events
Allowlist the messaging domain within Salesforce to make sure that Server-Sent Events (SSE) function correctly.
- From Setup, in the Quick Find box, enter CORS, and then select CORS.
- Click New.
- Enter https://ORGSUBDOMAINHERE.my.salesforce-scrt.com.
- Save your changes.