Whitelisting Files.com In Your Firewall
Files.com is a large, global cloud and SaaS application. Many of our customers are in environments that require whitelisted IP addresses, so we commit to publishing a list of IP addresses that may be involved in inbound or outbound connections to Files.com.
We have recently acquired our own contiguous IP address range for the purpose of making firewall whitelisting easier. Unfortunately, we have not yet migrated all of our services to this contiguous range. So for the mean time, we publish both our owned range and a separate list of all of the IPs we utilize which are not part of the range.
The list is extensive because it includes IPs in all regions where we operate servers, as well as IPs for different service types and integration endpoints for our various integrations. Unfortunately, we are not able to split this list into sub-lists by region or by integration type.
This list may change. To keep up to date with the latest list, you can poll our IP Address List API; our Command Line Interface (CLI) application makes this simple.
Whitelisting IPs
If you need to whitelist IPs in a firewall, your whitelist must include both the Files.com Owned IP Range and the list of Non-Owned IP addresses used by the Files.com service.
Additionally, if your site was formerly an ExaVault site that was migrated to Files.com and still uses the ExaVault host key, you will also need to whitelist the list of Non-Owned IP Addresses below that specifically applies to sites using the ExaVault host key.
No additional whitelisting is required if your site was formerly a SmartFile site that was migrated to Files.com.
Make sure that all IP addresses are white-listed, as we may switch between these at any time. Files.com does not provide IPv6 addresses.
Files.com Owned IP Range
Files.com owns the IP Range 198.72.80.0/20
, which includes all IP Addresses from 198.72.80.0
through 198.72.95.255
.
No additional whitelisting beyond this owned range is required if your site was formerly a SmartFile site that was migrated to Files.com.
We are endeavoring to increase our use of these IPs as we phase out non-owned IP addresses.
List of Non-Owned IP addresses used by the Files.com service
The following IP Addresses are owned by Amazon Web Services but exclusively used by Files.com. You can retrieve this list automatically from the /ip-addresses/reserved
API endpoint, or using the CLI App.
List of Non-Owned IP Addresses Specifically Related to Former ExaVault Customers Using The ExaVault Host Key
Some sites that were migrated from the ExaVault architecture will provide the same host key that was used on ExaVault. For those sites, these IP addresses are also used (in addition to the addresses above). You can retrieve this list automatically from the /ip-addresses/exavault-reserved
API endpoint, or using the CLI App.
IP Addresses For Former SmartFile Customers Using The SmartFile Host Key
Some sites that were migrated from the SmartFile platform will provide the same host key that was used on SmartFile. The IP addresses used by those sites are contained within the Files.com owned IP range.
If you have whitelisted the owned IP range, you do not need to add additional IP addresses for a site using the SmartFile Host Key for SFTP. You can use the CLI to retrieve the IP addresses specifically assigned for SFTP in this case.
Ports
If you restrict inbound or outbound access via a firewall, you may also need to determine which ports to whitelist in conjunction with our IP list. Ports are protocol specific.
For API traffic, which is used by our Desktop app, mobile apps, web app, CLI, SDKs, and API, port 443
(HTTPS) should be whitelisted.
If you are using FTP, you will need to whitelist port 21
and FTP data ports 40000-50000
, and optionally our three alternate FTP ports 990
, 3021
, and 3990
if they apply to your use case.
If you are using SFTP, you will need to whitelist port 22
and optionally our alternate SFTP port 3022
if it applies to your use case.
Outbound Connections from Files.com
For Outbound Connections from Files.com, Files.com will use IPs from our owned IP range or the non-owned IP list above for all of outbound connections, including Webhooks, SMTP, LDAP, and Remote Server connections.
If you have configured dedicated IP addresses for your site, you can configure some features to use those IP addresses for outbound connections. Whenever possible, we recommend not using your dedicated IP addresses for outbound connections; the ability to do so is provided for rare situations when the counterparty has strict firewall requirements that would make it unfeasible to whitelist all of the addresses in the general Files.com pool.
Remote Server connections can be configured to use your dedicated IP addresses for outbound connections, which will be used for our Remote Server Sync and Remote Server Mount features. The Custom SMTP feature also supports this capability, as does the Webhooks feature.