What firewall changes are needed to allow ClickDimensions proper access to your CRM On-Premise deployment?

Many corporate firewalls restrict communication with web services by IP addresses and ports through the use of firewalls, proxies and other security mechanisms. This can cause ClickDimensions and CRM to be unable to communicate.

The ClickDimensions application is hosted in Microsoft Azure, a secure, reliable hosted compute platform in Microsoft data centers.

The following information should be helpful to a network administrator in order to make the configurations needed to permit the ClickDimensions service to communicate with Dynamics CRM. ClickDimensions and your CRM system require two-way communication.

Service Description US Data Center EU Data Center Australia Data Center
ClickDimensions Plugins running in CRM will post OUT to: https://app.clickdimensions.com https://app-eu.clickdimensions.com https://app-au.clickdimensions.com
Application pages are hosted on: (this includes items such as email template designersform builder, etc. that users will access) https://app.clickdimensions.com (65.52.16.87) https://app-eu.clickdimensions.com (191.235.131.37) https://app.clickdimensions.com (104.210.90.197)

The following IP addresses are ClickDimensions service endpoints
in Azure that will post data and queries IN to CRM*

InboxCast Processing, RSS to Email 168.62.106.138 191.235.130.156 104.210.90.114
Processing of Email Sends 65.52.194.3 191.235.135.29 104.210.92.214
Web Analytics and Forms 65.52.209.250 191.235.130.239
191.235.131.125
191.235.128.160
104.210.89.105
104.210.91.187
104.210.95.220
SMS Service 65.52.244.50 191.235.133.92 104.210.90.15
Scoring 137.117.74.148 191.235.132.226 104.210.91.76
Email Statistics (Email Events) 65.52.244.196 191.235.131.249 104.210.88.247
Profile Management 65.52.244.132 191.235.130.254 104.210.95.141
Event Connectors (GoToWebinar, WebEx, Eventbrite, Cvent) 65.52.245.214 191.235.129.90 104.210.91.79
Nurture Programs 70.37.82.26 191.235.135.16 40.126.244.11
104.210.114.91
Social Profiles and other UI elements (Email and Web Content Editors) 65.52.244.229 191.235.131.217 104.210.95.127
Import Tool 65.52.55.29 104.214.218.45 104.210.89.53
Campaign Automation Builder 104.209.131.19 23.102.54.167 40.126.243.81
Power BI Content Pack 191.236.150.197
191.236.147.142
191.236.146.62
191.236.151.40
40.113.80.190
40.113.84.45
40.113.87.99
40.113.87.3
40.126.244.200
40.126.250.176
40.126.243.153
40.126.252.201

(Please note that these IP addresses are subject to change as we work to bring new features and performance to the clickdimensions solution. We strive to minimize changes and additions to these IP addresses, but occasional changes may be necessary to support new features and performance enhancements. If you restrict access to your CRM based on these IP addresses, please regularly check this article for updates.)

*Customers using the SBRC do not need to permit inbound communication from these IP addresses to CRM.

Data Center:

When you register for the ClickDimensions solution, your account will be associated with either the US data center, the EU data center, or the AU data center, depending on which you specify during the registration process. You only need to permit access to your CRM from the IP addresses in your associated data center.

Ports:

The ClickDimensions application pages (email template designers, form designers, etc.) are hosted on Azure using HTTPS/SSL (standard port 443). The ClickDimensions services that need to query CRM or sync data to CRM can communicate with your CRM using any port you specify during the registration of your CRM on our registration page. If your CRM is configured to be accessed externally via standard or custom ports, just be sure to include the port number in the CRM URL section of the registration page.

Proxies:

Networks with proxies that require authentication from the CRM server to the internet are not supported and can prevent ClickDimensions plugins from working correctly. This is because the ClickDimensions plugins that will post out to our application URL do not have a way to provide credentials to the proxy service. The outgoing request to our API will not supply proxy authentication credentials and may ultimately fail.  In order to circumvent this issue you will need to add the above application URLs (first row based on the data center of your account) to the Proxy Bypass List.

Email Server IP addresses:

See this article for a complete list of the IP addresses used for sending ClickDimensions email.

For further reading: