---
schema_version: "1"
id: 2cc6085539ec6600e85ba61b32b9c5c62bf256c1080564b5a1457ab5a3533e77
title: Configure Remote Site Settings
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/configuring_remoteproxy.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.configuring_remoteproxy.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: bf1cbbe452bf385694cecdf3d8d2c32481d7f825f26cc4f1f91eb7d446613f3c
description: Configure settings for a remote site.
products:
  - Security
release: "264"
---
# Configure Remote Site Settings

Configure settings for a remote site.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition">
        <colgroup>
          <col>
        </colgroup>
        <tbody>
          <tr class="">
            <td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td>

          </tr>
          <tr class="">
            <td class="slds-cell-wrap" style="vertical-align:top;">
              <p>Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>,
                <strong>Developer</strong>, and <strong>Database.com</strong> Editions
              </p>
              <p style="margin-bottom:0;">Visualforce and S-controls aren’t
                available in <strong>Database.com</strong></p>
            </td>

          </tr>
        </tbody>
      </table> <table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d61022e78">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d61022e78 ">To configure remote settings:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d61022e78 ">Customize Application or Modify All Data</td>

          </tr>
        </tbody>
      </table>

Before any Visualforce page, Apex callout, or JavaScript code using XmlHttpRequest in an s-control or custom button can call an external site, that site must be registered in the Remote Site Settings page, or the call fails.

To access the page, from [Setup](https://help.salesforce.com/s/articleView?id=xcloud.basics_nav_setup.htm&type=5&language=en_US), use the Quick Find box to find and select **Remote Site Settings**. This page displays a list of any remote sites already registered and provides additional information about each site, including remote site name and URL.

For security reasons, Salesforce restricts the outbound ports you can specify to one of the following:

- 80: This port only accepts HTTP connections.
- 443: This port only accepts HTTPS connections.
- 1024–65535 (inclusive): These ports accept HTTP or HTTPS connections.

To register a new site:

1. Click **New Remote Site**.
2. Enter a descriptive term for the Remote Site Name.
3. Enter the URL for the remote site.
4. To allow access to the remote site regardless of whether the user’s connection is over HTTP or HTTPS, select the Disable Protocol Security checkbox. When selected, Salesforce can pass data from an HTTPS session to an HTTP session, and vice versa. Only select this checkbox if you understand the security implications.
5. Optionally, enter a description of the site.
6. Click **Save** to finish, or click **Save & New** to save your work and begin registering an additional site.

![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-security-264-0-0-production-enus/8cecd769-ab2d-4e07-addf-c4f2927925e1/images/icon_tip.png)

Tip For best performance, verify that your remote HTTPS encrypted sites have OCSP (Online Certificate Status Protocol) stapling turned on.

#### See Also

- [Manage Trusted URLs](https://help.salesforce.com/s/articleView?id=xcloud.security_trusted_urls_manage.htm&release=264.0.0&type=5 "Specify the URLs that you trust to interact with your users and network. Use Content Security Policy (CSP) directives to control the types of resources that Lightning components, third-party APIs, and WebSocket connections can load from each trusted URL. If you enabled the Permissions-Policy HTTP header in Session Settings, you can also control which URLs can access browser features from Salesforce.")