Domains for the firewall allowlist
The domains listed and described in this article that specifically apply to your network configuration should be added to your allowlist or approved for authorized access.
For more information about other ports and services you may need to configure on your firewall, see About ports and services for your firewall.
Individual regions
The domains listed in this table provide the Genesys Cloud interface for users and admins. These domains are region-specific and each Genesys Cloud organization exists within only one region. Entities with multiple organizations may be deployed in various regions.
| Region | Domain |
|---|---|
| North America | |
| United States | *.use1.pure.cloud *.usw2.pure.cloud |
| FedRAMP | *.use2.us-gov-pure.cloud |
| Canada | *.cac1.pure.cloud |
| Mexico | *.mxc1.pure.cloud |
| South America | |
| Sao Paulo | *.sae1.pure.cloud |
| Asia Pacific | |
| Sydney | *.apse2.pure.cloud *.mypurecloud.com.au |
| Tokyo | *.apne1.pure.cloud *.mypurecloud.jp |
| Seoul | *.apne2.pure.cloud |
| Mumbai | *.aps1.pure.cloud |
| Osaka | *.apne3.pure.cloud |
| Singapore | *.apse1.pure.cloud |
| Hong Kongç | *.ape1.pure.cloud |
| Jakartaç | *.apse3.pure.cloud |
| EMEA | |
| Ireland | *.euw1.pure.cloud *.mypurecloud.ie |
| Frankfurt | *.euc1.pure.cloud *.mypurecloud.de |
| London | *.euw2.pure.cloud |
| Zurich | *.euc2.pure.cloud |
| UAE | *.mec1.pure.cloud |
| Cape Townç | *.afs1.pure.cloud |
| Parisç | *.euw3.pure.cloud |
ç Satellite media regions
All regions
The domains listed in this table apply to all regions. Descriptions of what each domain provides are included in the table.
| Domain | Description |
|---|---|
| *.mypurecloud.com | Provides the Genesys Cloud interface for users and admins. |
| help.mypurecloud.com | Provides access to the Genesys Cloud Resource Center for product documentation. Optional‡ |
| *.genesys.cloud | Provides access to the Genesys Cloud Developer Center for code samples, tutorials, and tools to help integrate Genesys Cloud into your contact center. Optional‡ |
| announcement. mypurecloud.com | Provides access to in-app announcements about new features. Optional‡ |
| sdk-cdn.mypurecloud.com | Provides access to the Developer Center for software development kits. Optional‡ |
| appfoundry.genesys.com | Provides access to the AppFoundry for application and integration solutions. Optional‡ |
| edge-cloudfront.use1.pure.cloud | Provides access to download the BYOC Premises – Customer Hardware Solution installer image file. Optional‡ |
‡ These domains are optional. Having access to these domains may help customers access documentation, announcements, software development kits, or AppFoundry solutions but they aren't required. You can block these domains without affecting the overall functioning of Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
Static CloudFront domain
Genesys uses a static CloudFront domain to deliver certain universal data objects necessary for Genesys Cloud to operate across all regions. The domain listed in this table applies to all regions.
| Domain | Description |
|---|---|
dhqbrvplips7x.cloudfront.net | Provides static content for Genesys Cloud applications. |
Regional FQDNs for CloudFront content
Genesys uses Amazon CloudFront to store API downloads for Genesys Cloud. Use the FQDN for your region to provide access to APIs for Genesys Cloud applications.
| Region | FQDN |
|---|---|
US East (N. Virginia) | https://api-downloads.mypurecloud.com |
US East 2 (FedRAMP) | https://api-downloads.use2.us-gov-pure.cloud |
US West (Oregon) | https://api-downloads.usw2.pure.cloud |
Canada (Central) | https://api-downloads.cac1.pure.cloud |
South America (São Paulo) | https://api-downloads.sae1.pure.cloud |
Europe (Frankfurt) | https://api-downloads.mypurecloud.de |
Europe (Ireland) | https://api-downloads.mypurecloud.ie |
Europe (London) | https://api-downloads.euw2.pure.cloud |
Europe (Zurich) | https://api-downloads.euc2.pure.cloud |
Middle East (UAE) | https://api-downloads.mec1.pure.cloud |
Regional FQDNs for managed phone firmware distribution
Genesys uses Amazon CloudFront to store phone firmware downloads for Genesys Cloud. Use the FQDN for your region to provide access to firmware downloads for your phones.
| Region | FQDN |
|---|---|
US East (N. Virginia) | https://d29e6q0340ucs1.cloudfront.net |
US East 2 (FedRAMP) | https://d2288v0yv0x44b.cloudfront.net |
US West (Oregon) | https://d1bpw2v7jxdtjt.cloudfront.net |
Canada (Central) | https://d3e18t5w6avovi.cloudfront.net |
South America (São Paulo) | https://d8fqp2tni48m1.cloudfront.net |
Europe (Frankfurt) | https://d1u04v5uuzd6tm.cloudfront.net |
Europe (Ireland) | https://d3r4d0ubch17l.cloudfront.net |
Europe (London) | https://d35hvbcb1u06wn.cloudfront.net |
Europe (Zurich) | https://d3u6nd8oads5y8.cloudfront.net |
Middle East (UAE) | https://d37wh7ku5m5785.cloudfront.net |
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
The domains listed in this table apply to all regions.
| Domain | Description |
|---|---|
fonts.googleapis.com maps.googleapis.com | Provides cascading style sheet (CSS), font information, and map information. |
| fonts.gstatic.com | Provides static content including fonts. |
| *.l.google.com | Provides STUN services for Edge devices, VoIP phones, WebRTC softphones, and Collaborate multimedia. This domain is optional. For more information, see Does port 19302 for Google’s STUN need to be open? |
| dns.google | The Edge tests for internet connectivity by pinging 8.8.8.8. (This is the IP address of dns.google.) |
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
| *.js-agent.newrelic.com | Requests made by client-side New Relic analytics browser applications. |
| *.bam.nr-data.net | Requests made by client-side New Relic analytics browser applications. |
† Third-party service; not hosted by Genesys Cloud. ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
| time.nist.gov | The NIST servers listen for an NTP request on port 123, and respond by sending a udp/ip data packet in the NTP format. The data packet includes a 64-bit time stamp. Note: The global address time.nist.gov is resolved to all of the appropriate server addresses. |
| † Third-party service; not hosted by Genesys Cloud. |
| Domain | Description |
|---|---|
| *.ztp.polycom.com | Provides zero-touch phone provisioning for Polycom VoIP phones. |
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that the services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
*.contentsquare.net *.contentsquare.com | Provides user analytics for Genesys Cloud to help teams identify areas for improvement. |
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that the services may exist in one or more subdomains of the defined domain. |
† Third-party service; not hosted by Genesys Cloud.
ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains.
Individual regions
The domains listed in this table provide the Genesys Cloud interface for users and admins. These domains are region-specific and each Genesys Cloud organization exists within only one region. Entities with multiple organizations may be deployed in various regions.
| Region | Domain |
|---|---|
| North America | |
| United States | *.use1.pure.cloud *.usw2.pure.cloud *.byoc.use1.genesys.cloud *.byoc.usw2.genesys.cloud |
| FedRAMP | *.use2.us-gov-pure.cloud *.byoc.use2.us-gov-genesys.cloud |
| Canada | *.cac1.pure.cloud *.byoc.cac1.genesys.cloud |
| South America | |
| Sao Paulo | *.sae1.pure.cloud *.byoc.sae1.genesys.cloud |
| Asia Pacific | |
| Sydney | *.apse2.pure.cloud *.mypurecloud.com.au *.byoc.apse2.genesys.cloud |
| Tokyo | *.apne1.pure.cloud *.mypurecloud.jp *.byoc.apne1.genesys.cloud |
| Seoul | *.apne2.pure.cloud *.byoc.apne2.genesys.cloud |
| Mumbai | *.aps1.pure.cloud *.byoc.aps1.genesys.cloud |
| Osaka | *.apne3.pure.cloud *.byoc.apne3.genesys.cloud |
| EMEA | |
| Ireland | *.euw1.pure.cloud *.mypurecloud.ie *.byoc.euw1.genesys.cloud |
| Frankfurt | *.euc1.pure.cloud *.mypurecloud.de *.byoc.euc1.genesys.cloud |
| London | *.euw2.pure.cloud *.byoc.euw2.genesys.cloud |
| Zurich | *.euc2.pure.cloud *.byoc.euc2.genesys.cloud |
| UAE | *.mec1.pure.cloud *.byoc.mec1.genesys.cloud |
All regions
The domains listed in this table apply to all regions. Descriptions of what each domain provides are included in the table.
| Domain | Description |
|---|---|
| *.mypurecloud.com | Provides the Genesys Cloud interface for users and admins. |
| help.mypurecloud.com | Provides access to the Genesys Cloud Resource Center for product documentation. Optional‡ |
| *.genesys.cloud | Provides access to the Genesys Cloud Developer Center for code samples, tutorials, and tools to help integrate Genesys Cloud into your contact center. Optional‡ |
| announcement. mypurecloud.com | Provides access to in-app announcements about new features. Optional‡ |
| sdk-cdn.mypurecloud.com | Provides access to the Developer Center for software development kits. Optional‡ |
| appfoundry.genesys.com | Provides access to the AppFoundry for application and integration solutions. Optional‡ |
‡ These domains are optional. Having access to these domains may help customers access documentation, announcements, software development kits, or AppFoundry solutions but they aren't required. You can block these domains without affecting the overall functioning of Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
Static CloudFront domain
Genesys uses a static CloudFront domain to deliver certain universal data objects necessary for Genesys Cloud to operate across all regions. The domain listed in this table applies to all regions.
| Domain | Description |
|---|---|
dhqbrvplips7x.cloudfront.net | Provides static content for Genesys Cloud applications. |
Regional FQDNs for CloudFront content
Genesys uses Amazon CloudFront to store API downloads for Genesys Cloud. Use the FQDN for your region to provide access to APIs for Genesys Cloud applications.
| Region | FQDN |
|---|---|
US East (N. Virginia) | https://api-downloads.mypurecloud.com |
US East 2 (FedRAMP) | https://api-downloads.use2.us-gov-pure.cloud |
US West (Oregon) | https://api-downloads.usw2.pure.cloud |
Canada (Central) | https://api-downloads.cac1.pure.cloud |
South America (São Paulo) | https://api-downloads.sae1.pure.cloud |
Europe (Frankfurt) | https://api-downloads.mypurecloud.de |
Europe (Ireland) | https://api-downloads.mypurecloud.ie |
Europe (London) | https://api-downloads.euw2.pure.cloud |
Europe (Zurich) | https://api-downloads.euc2.pure.cloud |
Middle East (UAE) | https://api-downloads.mec1.pure.cloud |
Regional FQDNs for managed phone firmware distribution
Genesys uses Amazon CloudFront to store phone firmware downloads for Genesys Cloud. Use the FQDN for your region to provide access to firmware downloads for your phones.
| Region | FQDN |
|---|---|
US East (N. Virginia) | https://d29e6q0340ucs1.cloudfront.net |
US East 2 (FedRAMP) | https://d2288v0yv0x44b.cloudfront.net |
US West (Oregon) | https://d1bpw2v7jxdtjt.cloudfront.net |
Canada (Central) | https://d3e18t5w6avovi.cloudfront.net |
South America (São Paulo) | https://d8fqp2tni48m1.cloudfront.net |
Europe (Frankfurt) | https://d1u04v5uuzd6tm.cloudfront.net |
Europe (Ireland) | https://d3r4d0ubch17l.cloudfront.net |
Europe (London) | https://d35hvbcb1u06wn.cloudfront.net |
Europe (Zurich) | https://d3u6nd8oads5y8.cloudfront.net |
Middle East (UAE) | https://d37wh7ku5m5785.cloudfront.net |
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
The domains listed in this table apply to all regions.
| Domain | Description |
|---|---|
fonts.googleapis.com maps.googleapis.com | Provides cascading style sheet (CSS), font information, and map information. |
| fonts.gstatic.com | Provides static content including fonts. |
| *.l.google.com | Provides STUN services for Edge devices, VoIP phones, WebRTC softphones, and Collaborate multimedia. This domain is optional. For more information, see Does port 19302 for Google’s STUN need to be open? |
| dns.google | The Edge tests for internet connectivity by pinging 8.8.8.8. (This is the IP address of dns.google.) |
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
| *.js-agent.newrelic.com | Requests made by client-side New Relic analytics browser applications. |
| *.bam.nr-data.net | Requests made by client-side New Relic analytics browser applications. |
† Third-party service; not hosted by Genesys Cloud. ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains. An asterisk (*) prefix indicates that services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
| time.nist.gov | The NIST servers listen for an NTP request on port 123, and respond by sending a udp/ip data packet in the NTP format. The data packet includes a 64-bit time stamp. Note: The global address time.nist.gov is resolved to all of the appropriate server addresses. |
| † Third-party service; not hosted by Genesys Cloud. |
| Domain | Description |
|---|---|
| *.ztp.polycom.com | Provides zero-touch phone provisioning for Polycom VoIP phones. |
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that the services may exist in one or more subdomains of the defined domain. |
| Domain | Description |
|---|---|
*.contentsquare.net *.contentsquare.com | Provides user analytics for Genesys Cloud to help teams identify areas for improvement. |
† Third-party service; not hosted by Genesys Cloud. An asterisk (*) prefix indicates that the services may exist in one or more subdomains of the defined domain. |
† Third-party service; not hosted by Genesys Cloud.
ø If you do not use New Relic, which is a third-party reporting service, you do not need to allow access to these domains.
| Modified date (YYYY-MM-DD) | Revision |
|---|---|
| 2026-01-19 | To accommodate changes for Dynamic Cloud Voice platform, combined existing content with new content in single article. Existing content now appears under the Legacy Cloud Voice platform heading. New content appears under the Dynamic Cloud Voice platform heading. |
| 2025-12-01 | Added satellite media regions to the Genesys Cloud -Individual regions section. |
| 2025-07-09 | Added Regional FQDNs for managed phone firmware distribution table to the Amazon AWS section. |
| 2024-11-18 | Genesys Cloud resolved the issue with the CloudFront domains in the three AWS regions:
Genesys Cloud now uses Amazon CloudFront URLs to serve content stored in Amazon S3 to all supported AWS regions. |
| 2024-11-01 | Genesys Cloud encountered an issue with the new CloudFront domains, released October 28, 2024, in three of the supported AWS regions:
Until this issue is resolved, organizations in these AWS regions will need to continue to permit access to the s3 domains in their firewall allowlist to provide access to content stored in Amazon S3:
|
| 2024-10-28 | Removed Genesys Cloud *.s3 domain entries and replaced with CloudFront URLs. Genesys Cloud now uses Amazon CloudFront URLs to serve content stored in Amazon S3. For more information, see October 28, 2024 Release Notes. |
| 2024-09-30 | Added ContentSquare domains. |
| 2024-06-24 | Removed the new domains
and replaced with the previous domains.
|
| 2024-06-10 | Reorganized the table layout. Replaced *.s3.amazonaws.com and related regional domains with
|
| 2024-01-31 | Reorganized the table layout to better accommodate the new regions. |
| 2024-01-24 | Added Osaka, UAE, and Zurich regions. |
| 2024-01-17 | Changed Developer Center domain from developer.genesys.cloud to *.genesys.cloud to include all of the subdomains. |
| 2022-10-19 | *.mypurecloud.com is now required for all regions; not just the United States. |
| 2022-03-23 | Added US East 2 (Ohio) region |
| 2021-03-26 | Added Mumbai (*.aps1.pure.cloud) to the Asia Pacific region. |
| 2021-02-24 | Added new regional (*.pure.cloud) domains to the Genesys Cloud section of the table. |
| 2020-12-14 | Broke out the main sections of the larger Ports and services for your firewall article into smaller articles. Created this article to cover the domains for your firewall allowlist. |
[NEXT] Was this article helpful?
Get user feedback about articles.