Overview
At Everbridge, we continually strive to improve our broadcast capabilities to better serve our customers. As part of this ongoing effort, Everbridge regularly adds new infrastructure and reallocates existing infrastructure to increase system performance, and resiliency and better meet the needs of our growing customer base.
As a best practice, Everbridge customers who need to restrict access to Everbridge services for security reasons should follow the permit listing guidelines below.
What is Permit Listing?
Permit listing ensures that communication between trusted sources will not be inadvertently blocked by security systems and policies, e.g., firewall rules, email spam filtering, and proxy server settings.
Why Should I Permit List?
As the Everbridge service is used to send critical communications, we want to ensure that users are able to access Everbridge services to send critical communications whenever necessary. Additionally, we want to ensure intended recipients are also able to receive such notifications.
Can I Permit List by IP Address?
Everbridge strongly discourages permit listing by specific IP addresses or IP ranges, since IP addresses used to deliver Everbridge services are continually expanding as we grow to meet the dynamic critical communication needs of our customers. For customers that find it unavoidable to use IP addresses, we offer the specific service IP addresses below.
IMPORTANT: It is crucial to be aware that these IP addresses may undergo changes. Although we strive to inform customers of these changes, given the dynamic nature of our business, we do not commit to any lead time on such notices/advisories.
How Do I Permit List?
Your organization's network and security administrator(s) will know whether permit listing is required within your organization and how to implement it. To permit list Everbridge solutions, please provide them with the following information.
Services
Everbridge Suite (EBS), Critical Event Management (CEM) and Critical Events Platform (CEP)
IP Addresses
-
- 199.83.128.1 - 199.83.135.254
- 198.143.32.1 - 198.143.63.254
- 149.126.72.1 - 149.126.79.254
- 103.28.248.1 - 103.28.251.254
- 185.11.124.1 - 185.11.127.254
- 45.64.64.0 - 45.64.67.255
- 192.230.64.1 - 192.230.127.254
- 107.154.0.0 - 107.154.255.254
- 45.60.0.1 - 45.60.255.254
- 45.223.0.1 - 45.223.255.254
- 2a02:e980:0:0:0:0:0:0 - 2a02:e987:ffff:ffff:ffff:ffff:ffff:ffff
NEW as of Dec 2023:
-
- 54.144.142.193
- 54.146.44.202
- 54.235.204.120
- 3.211.179.151
- 3.226.147.207
SFTP
Domain Names
If your organization uses the Everbridge SFTP service for uploading data, then SFTP (port 22) access to the following hostnames should be allowed:
- For users of Everbridge Suite solution that log in to "manager.everbridge.net"
- sftp-aws-acct.everbridge.net
- sftp-aws-us.everbridge.net
- sftp-aws-uk.everbridge.net
- sftp-aws-us3.everbridge.net
- sftp-aws-ca.everbridge.net
- sftp-aws-de.everbridge.net
- sftp-aws-us2.everbridge.net
- For users of Everbridge Suite solutions that log in to "manager.everbridge.eu"
- sftp-aws-acct.everbridge.eu
- sftp-aws-eu1.everbridge.eu
IP Addresses
If your organization uses the Everbridge SFTP service and requires permit listing by IP Addresses please reference the list below:
-
sftp-aws-acct.everbridge.net
- 54.198.226.69
- 18.235.7.231
- 52.73.213.162
- 35.167.4.231
- 52.42.44.198
- 54.184.126.138
-
sftp-aws-ca.everbridge.net
- 3.96.107.0
- 3.97.66.217
- 3.98.196.210
-
sftp-aws-de.everbridge.net
- 3.124.57.195
- 3.126.228.234
- 52.29.29.215
-
sftp-aws-uk.everbridge.net
- 18.168.83.69
- 18.168.238.199
- 18.168.14.70
-
sftp-aws-us.everbridge.net
- 18.209.249.143
- 3.213.113.195
- 3.232.106.235
- 44.231.75.143
- 50.112.117.112
- 54.70.21.108
-
sftp-aws-us2.everbridge.net
- 54.156.153.119
- 52.1.64.226
- 34.234.26.122
- 35.164.57.31
- 35.81.208.14
- 44.224.150.252
-
sftp-aws-us3.everbridge.net
- 54.146.245.238
- 34.197.201.206
- 3.220.68.54
- 34.212.249.25
- 44.231.24.187
- 54.71.51.168
-
sftp-aws-acct.everbridge.eu
- 3.126.111.6
- 18.194.135.8
- 3.75.156.34
-
sftp-aws-eu1.everbridge.eu
- 3.125.212.157
- 3.74.81.168
- 18.159.26.228
Email and Email Notifications
Domain Names
It is recommended to configure your organization's email servers to rely on "Sender Policy Framework (SPF)", an industry standard for determining which servers are authorized to send email on behalf of Everbridge. If SPF implementation is not a viable option, your network administrator(s) should ensure that email notifications sent from the following domains are allowed:
- Mail Domains:
- everbridge.net
- everbridge.eu
- everbridge.com
- everbridgemail.com
Filtering services will validate links in emails. For more information, please see following knowledge base article EBS: When Contacts Try to Confirm Receipt of an Email or SMS Message in Everbridge Suite, They See 'We appreciate your response, but you already responded to this message'.
IP Addresses
- For users of Everbridge Suite solution that log in to "manager.everbridge.net"
- 3.132.65.8
- 52.13.126.222
- 3.23.36.254
- 52.13.73.26
- 3.22.102.251
- 54.212.187.12
- 3.21.23.140
- 52.12.139.153
- 54.188.101.235
- 3.23.38.224
New as of April 18, 2024
-
- 44.222.17.95
- 34.234.250.32
- 3.216.57.69
- 3.221.39.20
- 23.21.137.69
- For users of Everbridge Suite solution that log in to "manager.everbridge.eu"
- 147.253.221.31
- 156.70.17.123 -156.70.17.127
Web & API Usage
Domain Names
It is recommended to allow HTTP (port 80) and HTTPS (port 443) access to the following domain names:
- For users of Everbridge Suite solution that log in to "manager.everbridge.net"
- manager.everbridge.net
- api.everbridge.net
- member.everbridge.net
- For users of Everbridge Suite solution that log in to "manager.everbridge.eu"
- manager.everbridge.eu
- api.everbridge.eu
- member.everbridge.eu
IP Addresses
-
- 50.18.204.217
- 50.18.210.150
- 18.211.70.205
- 18.210.205.228
- 18.210.174.20
NEW as of Dec 2023:
-
- 54.144.142.193
- 54.146.44.202
- 54.235.204.120
- 3.211.179.151
- 3.226.147.207
Visual Command Center & Risk Center 10
Domain Names
For users of Visual Command Center that log in to "vcc.everbridge.net", which includes viewing the map, sending alerts, and Incident Management:
-
- vcc.everbridge.net
- vcc.everbridge.eu
- app.pendo.io
IP Addresses
-
- vcc.everbridge.net = 104.18.0.179 or 104.18.1.179
- vcc.everbridge.eu = 104.18.10.45 or 104.18.11.45
- app.pendo.io = 34.107.204.85
Everbridge Support Center and Everbridge University
Domain Names
It is recommended to allow HTTP (port 80) and HTTPS (port 443) access to the following domain names:
-
- supportcenter.everbridge.com
- university.everbridge.com
- na29.salesforce.com
- cys.na29.visual.force.com
- everbridge.adobeconnect.com
iPaaS
IP Addresses
iPaaS uses AWS. The ranges can be found in their documentation: https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html
Secure Push
Domain Names
If your organization uses Everbridge Secure Push, it is recommended to allow access to the following domain names:
-
- ceout.everbridge.net
IP Addresses
-
- 18.210.174.20
- 18.210.205.228
- 18.211.70.205
- 34.217.223.172
- 34.208.132.186
- 35.163.236.34
- 52.42.55.34
New as of July 25, 2024
-
- 54.144.142.193
- 54.146.44.202
- 54.235.204.120
- 3.211.179.151
- 3.226.147.207
Alertus
IP Addresses
If you have firewall restrictions setup between Everbridge and Alertus, then you need to add the following IP addresses to the firewall:
-
- 34.226.231.108
- 54.243.42.44
- 34.195.93.112
- 18.210.174.20
- 18.210.205.228
- 18.211.70.205
- 35.81.199.164
- 54.68.127.50
- 34.208.205.234
- 52.42.55.34
- 35.163.236.34
- 34.208.132.186
- 34.217.223.172
NEW as of Dec 2023:
-
- 54.144.142.193
- 54.146.44.202
- 54.235.204.120
- 3.211.179.151
- 3.226.147.207
There are two different integrations between Everbridge and Alertus: SOAP API integration and REST API integration. If you are using the SOAP API integration, the following steps must also be performed:
- Remote / connect to your Alertus Server.
- Open the AlertusMiddleware.impl.properties file located in [ALERTUS DRIVE]\alertus\conf directory where [ALERTUS DRIVE] is the drive where Alertus is installed.
- Find the line that starts with soap.alertusMiddlewareBasic.allowableIPs. Change that line to the following:
- Save the file.
- Restart the AlertusTomcat Windows Service.
Everbridge 360™ Desktop Application
Domain Names
If your organization uses the Everbridge 360™ Desktop Application, it is recommended to allow access to the following domain names and associated ports:
-
- mobilemember.everbridge.net:443
- android.clients.google.com:443
- fcmregistrations.googleapis.com:443
- fcm.googleapis.com:443
- mtalk.google.com:5228
Article Feedback
Please sign in to leave a comment.