1. Everbridge
  2. Knowledge
  3. Administration
  4. Security

EBS: Everbridge Permit Listing Best Practices

Updated
Diane McCoy

lock-solid.svg

Overview

At Everbridge, we continually strive to improve our broadcast capabilities to better serve our customers. As part of this ongoing effort, Everbridge regularly adds new infrastructure and reallocates existing infrastructure to increase system performance, and resiliency and better meet the needs of our growing customer base.

As a best practice, Everbridge customers who need to restrict access to Everbridge services for security reasons should follow the permit listing guidelines below.

What is Permit Listing?

Permit listing ensures that communication between trusted sources will not be inadvertently blocked by security systems and policies, e.g., firewall rules, email spam filtering, and proxy server settings.

Why Should I Permit List?

As the Everbridge service is used to send critical communications, we want to ensure that users are able to access Everbridge services to send critical communications whenever necessary. Additionally, we want to ensure intended recipients are also able to receive such notifications.

Can I Permit List by IP Address?

Everbridge strongly discourages permit listing by specific IP addresses or IP ranges, since IP addresses used to deliver Everbridge services are continually expanding as we grow to meet the dynamic critical communication needs of our customers. For customers that find it unavoidable to use IP addresses, we offer the specific service IP addresses below.

IMPORTANT: It is crucial to be aware that these IP addresses may undergo changes.  Although we strive to inform customers of these changes, given the dynamic nature of our business, we do not commit to any lead time on such notices/advisories.

How Do I Permit List?

Your organization's network and security administrator(s) will know whether permit listing is required within your organization and how to implement it. To permit list Everbridge solutions, please provide them with the following information.

Services

Everbridge Suite (EBS), Critical Event Management (CEM) and Critical Events Platform (CEP)

IP Addresses

    • 199.83.128.1 - 199.83.135.254
    • 198.143.32.1 - 198.143.63.254
    • 149.126.72.1 - 149.126.79.254
    • 103.28.248.1 - 103.28.251.254
    • 185.11.124.1 - 185.11.127.254
    • 45.64.64.0 - 45.64.67.255
    • 192.230.64.1 - 192.230.127.254
    • 107.154.0.0 - 107.154.255.254
    • 45.60.0.1 - 45.60.255.254
    • 45.223.0.1 - 45.223.255.254
    • 2a02:e980:0:0:0:0:0:0 - 2a02:e987:ffff:ffff:ffff:ffff:ffff:ffff

NEW as of Dec 2023:

    • 54.144.142.193
    • 54.146.44.202
    • 54.235.204.120
    • 3.211.179.151
    • 3.226.147.207

SFTP

Domain Names

If your organization uses the Everbridge SFTP service for uploading data, then SFTP (port 22) access to the following hostnames should be allowed:

  • For users of Everbridge Suite solution that log in to "manager.everbridge.net"
    • sftp-aws-acct.everbridge.net
    • sftp-aws-us.everbridge.net
    • sftp-aws-uk.everbridge.net
    • sftp-aws-us3.everbridge.net
    • sftp-aws-ca.everbridge.net
    • sftp-aws-de.everbridge.net
    • sftp-aws-us2.everbridge.net
  • For users of Everbridge Suite solutions that log in to "manager.everbridge.eu"
    • sftp-aws-acct.everbridge.eu
    • sftp-aws-eu1.everbridge.eu

IP Addresses

If your organization uses the Everbridge SFTP service and requires permit listing by IP Addresses please reference the list below:

  • sftp-aws-acct.everbridge.net
    • 54.198.226.69
    • 18.235.7.231
    • 52.73.213.162
    • 35.167.4.231
    • 52.42.44.198
    • 54.184.126.138
  • sftp-aws-ca.everbridge.net
    • 3.96.107.0
    • 3.97.66.217
    • 3.98.196.210
  • sftp-aws-de.everbridge.net
    • 3.124.57.195
    • 3.126.228.234
    • 52.29.29.215
  • sftp-aws-uk.everbridge.net
    • 18.168.83.69 
    • 18.168.238.199
    • 18.168.14.70
  • sftp-aws-us.everbridge.net
    • 18.209.249.143
    • 3.213.113.195 
    • 3.232.106.235
    • 44.231.75.143
    • 50.112.117.112
    • 54.70.21.108
  • sftp-aws-us2.everbridge.net
    • 54.156.153.119
    • 52.1.64.226 
    • 34.234.26.122
    • 35.164.57.31
    • 35.81.208.14
    • 44.224.150.252
  • sftp-aws-us3.everbridge.net
    • 54.146.245.238 
    • 34.197.201.206
    • 3.220.68.54
    • 34.212.249.25
    • 44.231.24.187
    • 54.71.51.168
  • sftp-aws-acct.everbridge.eu
    • 3.126.111.6
    • 18.194.135.8 
    • 3.75.156.34
  • sftp-aws-eu1.everbridge.eu
    • 3.125.212.157 
    • 3.74.81.168 
    • 18.159.26.228

Email and Email Notifications

Domain Names

It is recommended to configure your organization's email servers to rely on "Sender Policy Framework (SPF)", an industry standard for determining which servers are authorized to send email on behalf of Everbridge. If SPF implementation is not a viable option, your network administrator(s) should ensure that email notifications sent from the following domains are allowed:

  • Mail Domains:
    • everbridge.net
    • everbridge.eu
    • everbridge.com
    • everbridgemail.com

Filtering services will validate links in emails. For more information, please see following knowledge base article EBS: When Contacts Try to Confirm Receipt of an Email or SMS Message in Everbridge Suite, They See 'We appreciate your response, but you already responded to this message'.

IP Addresses

  • For users of Everbridge Suite solution that log in to "manager.everbridge.net"
    • 3.132.65.8
    • 52.13.126.222
    • 3.23.36.254
    • 52.13.73.26
    • 3.22.102.251
    • 54.212.187.12
    • 3.21.23.140
    • 52.12.139.153
    • 54.188.101.235
    • 3.23.38.224

New as of April 18, 2024

    • 44.222.17.95
    • 34.234.250.32
    • 3.216.57.69
    • 3.221.39.20
    • 23.21.137.69
  • For users of Everbridge Suite solution that log in to "manager.everbridge.eu"
    • 147.253.221.31
    • 156.70.17.123 -156.70.17.127

 

Web & API Usage

Domain Names

It is recommended to allow HTTP (port 80) and HTTPS (port 443) access to the following domain names:

  • For users of Everbridge Suite solution that log in to "manager.everbridge.net"
    • manager.everbridge.net
    • api.everbridge.net
    • member.everbridge.net
  • For users of Everbridge Suite solution that log in to "manager.everbridge.eu"
    • manager.everbridge.eu
    • api.everbridge.eu
    • member.everbridge.eu

IP Addresses

    • 50.18.204.217
    • 50.18.210.150
    • 18.211.70.205
    • 18.210.205.228
    • 18.210.174.20

NEW as of Dec 2023:

    • 54.144.142.193
    • 54.146.44.202
    • 54.235.204.120
    • 3.211.179.151
    • 3.226.147.207

Visual Command Center & Risk Center 10

Domain Names

For users of Visual Command Center that log in to "vcc.everbridge.net", which includes viewing the map, sending alerts, and Incident Management:

    • vcc.everbridge.net
    • vcc.everbridge.eu
    • app.pendo.io

IP Addresses

    • vcc.everbridge.net = 104.18.0.179 or 104.18.1.179
    • vcc.everbridge.eu = 104.18.10.45 or 104.18.11.45
    • app.pendo.io = 34.107.204.85

Everbridge Support Center and Everbridge University

Domain Names

It is recommended to allow HTTP (port 80) and HTTPS (port 443) access to the following domain names:

    • supportcenter.everbridge.com
    • university.everbridge.com
    • na29.salesforce.com
    • cys.na29.visual.force.com
    • everbridge.adobeconnect.com

iPaaS

IP Addresses

iPaaS uses AWS. The ranges can be found in their documentation: https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html

Secure Push

Domain Names

If your organization uses Everbridge Secure Push, it is recommended to allow access to the following IP addresses.

  •  

IP Addresses

    • 18.210.174.20
    • 18.210.205.228
    • 18.211.70.205
    • 34.217.223.172
    • 34.208.132.186
    • 35.163.236.34
    • 52.42.55.34

New as of July 25, 2024

    • 54.144.142.193
    • 54.146.44.202
    • 54.235.204.120
    • 3.211.179.151
    • 3.226.147.207

 

Alertus

IP Addresses

If you have firewall restrictions setup between Everbridge and Alertus, then you need to add the following IP addresses to the firewall:

    • 34.226.231.108
    • 54.243.42.44
    • 34.195.93.112
    • 18.210.174.20
    • 18.210.205.228
    • 18.211.70.205
    • 35.81.199.164
    • 54.68.127.50
    • 34.208.205.234
    • 52.42.55.34
    • 35.163.236.34
    • 34.208.132.186
    • 34.217.223.172

​​​​​​​NEW as of Dec 2023:

    • 54.144.142.193
    • 54.146.44.202
    • 54.235.204.120
    • 3.211.179.151
    • 3.226.147.207

There are two different integrations between Everbridge and Alertus: SOAP API integration and REST API integration. If you are using the SOAP API integration, the following steps must also be performed:

  1. Remote / connect to your Alertus Server.
  2. Open the AlertusMiddleware.impl.properties file located in [ALERTUS DRIVE]\alertus\conf directory where [ALERTUS DRIVE] is the drive where Alertus is installed.
  3.  Find the line that starts with soap.alertusMiddlewareBasic.allowableIPs. Change that line to the following:
soap.alertusMiddlewareBasic.allowableIPs = 127.0.0.1;18.211.70.205;18.210.205.228;18.210.174.20;34.226.231.108;54.243.42.44;34.195.93.112;35.81.199.164;54.68.127.50;34.208.205.234;52.42.55.34;35.163.236.34;34.208.132.186;34.217.223.172
  1. Save the file.
  2. Restart the AlertusTomcat Windows Service.

Everbridge 360™ Desktop Application

Domain Names

If your organization uses the Everbridge 360™ Desktop Application, it is recommended to allow access to the following domain names and associated ports:

    • mobilemember.everbridge.net:443
    • android.clients.google.com:443
    • fcmregistrations.googleapis.com:443
    • fcm.googleapis.com:443
    • mtalk.google.com:5228
Was this article helpful?
1 out of 1 found this helpful

Article Feedback

Please sign in to leave a comment.