ShareFile Firewall Configuration – IP addresses to whitelist

Citrix recommends as a best practice that customers leverage domain whitelisting instead of IP address whitelisting as described here: https://support.citrix.com/article/CTX208318 . This is due to frequent changes of cloud services to scale up and to introduce new services.


Purpose

ShareFile Customers who have deployed a network firewall need to whitelist the following IP addresses in order to avoid service interruptions. If customers do not have a firewall, no action is required.

IP details

Click on the links below to proceed to the section directly:

ShareFile Control Plane IP Ranges

ShareFile Outgoing requests (ShareFile to Client)

ShareFile to Client SMTP Servers

Email Notification IPs

Email Notifications

*.sf-notifications.com

198.37.153.46

198.21.0.175 (For Trial Accounts)

mail@sf-notifications.com

167.89.16.23
noreply@sf-notifications.com 167.89.16.230
167.89.16.232

ShareFile Control Plane IP Ranges


You must allow traffic to the below connections from your on-premise environment to communicate with the ShareFile Control Plane.

Example scenarios:

  • requests sent to ShareFile from an on-premise storage zone controllers for a health check and data transfers
  • Users initiating data transfers using ShareFile web, desktop, and mobile tools.


US Control Plane

NOTE: The latest IP addresses added to this list are identified using bold.

CIDR Notation

IP Address

Netmask

52.1.177.90/32
52.1.177.90
255.255.255.255
52.3.211.188/32
52.3.211.188
255.255.255.255
52.22.72.157/32
52.22.72.157
255.255.255.255
52.87.3.154/32
52.87.3.154
255.255.255.255
52.200.24.193/32
52.200.24.193
255.255.255.255
52.87.91.51/32
52.87.91.51
255.255.255.255
52.37.219.8/32
52.37.219.8
255.255.255.255
52.37.89.58/32
52.37.89.58
255.255.255.255
52.37.52.41/32
52.37.52.41
255.255.255.255
52.11.136.239/32
52.11.136.239
255.255.255.255
52.37.208.125/32
52.37.208.125
255.255.255.255
52.37.210.167/32
52.37.210.167
255.255.255.255
52.200.24.11/32
52.200.24.11
255.255.255.255
52.37.129.37/32
52.37.129.37
255.255.255.255
52.6.55.146/32
52.6.55.146
255.255.255.255
52.37.243.95/32
52.37.243.95
255.255.255.255
3.94.248.86/32
3.94.248.86
255.255.255.255
3.213.151.108/32
3.213.151.108
255.255.255.255
100.24.163.216/32
100.24.163.216
255.255.255.255
100.25.95.239/32
100.25.95.239
255.255.255.255
3.218.174.246/32
3.218.174.246
255.255.255.255
35.170.240.139/32
35.170.240.139
255.255.255.255
3.217.81.52/32
3.217.81.52
255.255.255.255
3.208.185.30/32
3.208.185.30
255.255.255.255
54.161.218.199/32 54.161.218.199 255.255.255.255
34.202.201.239/32 34.202.201.239 255.255.255.255
54.196.214.245/32 54.196.214.245 255.255.255.255
34.227.203.234/32 34.227.203.234 255.255.255.255
54.166.105.254/32 54.166.105.254 255.255.255.255
54.163.57.146/32 54.163.57.146 255.255.255.255
54.163.57.200/32 54.163.57.200 255.255.255.255
3.225.182.160/32 3.225.182.160 255.255.255.255
3.86.137.66/32 3.86.137.66 255.255.255.255
34.236.102.120/32 34.236.102.120 255.255.255.255
34.237.178.245/32 34.237.178.245 255.255.255.255
34.237.80.135/32 34.237.80.135 255.255.255.255
52.1.74.147/32 52.1.74.147 255.255.255.255
52.21.196.12/32 52.21.196.12 255.255.255.255
52.4.155.245/32 52.4.155.245 255.255.255.255
52.45.187.193/32 52.45.187.193 255.255.255.255
52.54.145.13/32 52.54.145.13 255.255.255.255
52.54.57.222/32 52.54.57.222 255.255.255.255
54.156.235.204/32 54.156.235.204 255.255.255.255
54.165.232.145/32 54.165.232.145 255.255.255.255
54.83.66.127/32 54.83.66.127 255.255.255.255
34.203.96.105/32 34.203.96.105 255.255.255.255
54.145.88.246/32 54.145.88.246 255.255.255.255
54.197.162.63/32 54.197.162.63 255.255.255.255
173.199.0.0/18 173.199.0.0 – 173.199.63.255 255.255.192.0

EU Control Plane

NOTE: The latest IP addresses added to this list are identified using bold.

CIDR Notation

IP Address

Netmask

52.28.80.248/32
52.28.80.248
255.255.255.255
52.28.86.15/32
52.28.86.15
255.255.255.255
52.28.93.20/32
52.28.93.20
255.255.255.255
52.28.106.33/32
52.28.106.33
255.255.255.255
52.28.123.31/32
52.28.123.31
255.255.255.255
52.28.123.168/32
52.28.123.168
255.255.255.255
52.48.148.82/32
52.48.148.82
255.255.255.255
52.50.40.140/32
52.50.40.140
255.255.255.255
52.50.103.48/32
52.50.103.48
255.255.255.255
52.50.103.153/32
52.50.103.153
255.255.255.255
52.49.128.78/32
52.49.128.78
255.255.255.255
52.50.108.81/32
52.50.108.81
255.255.255.255
52.50.111.193/32
52.50.111.193
255.255.255.255
52.28.124.54/32
52.28.124.54
255.255.255.255
52.48.197.157/32
52.48.197.157
255.255.255.255
52.28.126.247/32
52.28.126.247
255.255.255.255
18.196.153.205/32
18.196.153.205
255.255.255.255
35.158.181.96/32
35.158.181.96
255.255.255.255
54.93.144.35/32
54.93.144.35
255.255.255.255
3.121.15.139/32
3.121.15.139
255.255.255.255
3.121.255.90/32
3.121.255.90
255.255.255.255
35.157.224.37/32
35.157.224.37
255.255.255.255
18.184.195.75/32 18.184.195.75 255.255.255.255
35.156.143.205/32 35.156.143.205 255.255.255.255
35.156.161.131/32 35.156.161.131 255.255.255.255
35.157.201.218/32 35.157.201.218 255.255.255.255
35.157.208.120/32 35.157.208.120 255.255.255.255
52.28.176.168/32 52.28.176.168 255.255.255.255
52.29.102.192/32 52.29.102.192 255.255.255.255
52.57.51.106/32 52.57.51.106 255.255.255.255
52.28.189.54/32 52.28.189.54 255.255.255.255
18.157.252.190/32 18.157.252.190 255.255.255.255
18.157.205.75/32 18.157.205.75 255.255.255.255
18.156.24.20/32 18.156.24.20 255.255.255.255
78.108.112.0/20 78.108.112.0 – 78.108.127.255 255.255.240.0

Outgoing Requests (ShareFile to Client)

You must allow traffic from the below connections to your on-premise environment to communicate with the ShareFile Control Plane.

Example scenarios:

  • requests sent from ShareFile to an on-premise storage zone controllers for data transfers
Region Primary IP 1 Primary IP 2
us-east-1 (Virgina) 34.192.163.240 34.192.163.223
us-east-2 (Ohio) 13.59.239.194 52.14.203.191
us-west-1 (California) 54.176.66.78 52.8.56.68
us-west-2 (Oregon) 35.165.254.91 35.162.215.209
ap-northeast-2 (Seoul) 13.124.156.137 52.78.53.235
ap-southeast-1 (Singapore) 13.228.68.164 13.228.227.43
ap-southeast-2 (Sydney) 54.79.79.53 52.65.48.104
ap-northeast-1 (Tokyo) 52.198.62.54 13.113.146.65
ca-central-1 (Canada) 35.182.98.19 52.60.156.23
eu-central-1 (Frankfurt) 35.156.155.92 35.156.109.86
eu-west-1 (Ireland) 52.211.90.91 52.214.90.84
sa-east-1 (Sao Paulo) 18.231.13.112 54.207.6.242

Custom SMTP IPs

You must allow traffic from the below connections to communicate with your on-premise SMTP servers.

ShareFile to Client SMTP Servers (US)

CIDR Notation IP Address Netmask

23.22.155.226

23.22.155.226

255.255.255.255

52.54.27.154

52.54.27.154

255.255.255.255

52.54.27.2

52.54.27.2

255.255.255.255

ShareFile to Client SMTP Servers (EU)

CIDR Notation IP Address Netmask

52.59.39.187

52.59.39.187

255.255.255.255

52.59.36.111

52.59.36.111

255.255.255.255

52.59.4.117

52.59.4.117

255.255.255.255

Related:

Leave a Reply