TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect Whitelisting Requirements

TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect Whitelisting Requirements

book

Article ID: KB0072060

calendar_today

Updated On:

Products Versions
TIBCO Cloud Integration - Connect ( Scribe ) -

Description

Depending on the configuration of your network and the requirements of the third-party applications being integrated, you may need to whitelist some IP addresses or URLs for successful communications. The sections below outline possible communication scenarios and provide the list of IP addresses that need to be whitelisted or URLs that need to be accessible for each case.

NOTE: TIBCO may update these IP addresses or URLs after posting a Release Notice and updating the TIBCO Cloud Services status.

Cloud Agent

Cloud Agents are hosted in the TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect  Cloud. If these Agents are communicating with an application or system that is behind a firewall, you may need to whitelist the source IP addresses of our Cloud Agents.


The data center your Organization is associated with determines which set of IP addresses needs to be whitelisted. To see the data center associated with your Organization select More > Edit Organization from the menu.

NOTE: If you are using TIBCO Cloud™ Integration - Connect, your data center is in the header across the top of the browser window.
 

TIBCO Cloud Region / Data Center Provider

*AWS Australia (Sydney) / AWS Asia Pacific (Sydney)
ap-southeast-2
  • 13.237.213.218
  • 52.65.52.49

AWS US West (Oregon) / AWS US East (N. Virginia)
us-east-1
  • 52.6.65.166
  • 52.21.2.156

*AWS US East (N. Virginia) / AWS US East (N. Virginia)
us-east-1
  • 34.200.113.156
  • 44.209.127.61

*Azure US (Washington) / Azure West US 2 (Washington)
  • 52.137.93.65
  • 40.91.89.158

AWS Europe (Ireland) / AWS Europe (Frankfurt)
eu-central-1
  • 35.157.107.151
  • 52.59.173.145
 

 Note: The Azure US, AWS US East, and AWS Australia data centers are available only when working in TIBCO Cloud™ Integration - Connect . In TIBCO Cloud ™ Integration Data Centers are referred to as Regions.

On-Premise Agent

On-Premise Agents are installed on a local server and handle all communication between TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect and the source and target applications being integrated.
 

TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect Cloud

To retrieve instructions and update TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect with its current status the Agent needs access to one of the following TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect endpoints.

NOTE: For On-Premise Agents, if you are using a data center other than the US data center, you must allow access to both your own data center and the AWS US data center.
 

TIBCO Cloud Region / Data Center Provider


AWS Australia (Sydney) / AWS Asia Pacific (Sydney)
ap-southeast-2
Endpoint:
https://au1-connect-agentaws.scribesoft.com
Static IP Addresses
  • 13.210.38.217
  • 52.64.131.8
  • 54.79.197.91
  • 54.153.138.211
  • 54.206.181.49
  • 54.253.98.44

AWS US East (N. Virginia) / AWS US East (N. Virginia)
us-east-1
Endpoint:
https://us-east.connect-agent.scribesoft.com
Static IP Addresses
  • 34.194.97.106
  • 34.196.184.112
  • 34.225.166.152
  • 35.170.223.145
  • 54.173.29.240
  • 54.235.154.48
AWS US West (Oregon) / AWS US East (N. Virginia)
us-east-1
Endpoint:
https://agent.scribesoft.com
Static IP Addresses
  • 18.205.138.48
  • 34.197.135.234
  • 34.197.203.69
  • 34.199.76.224
  • 34.233.74.136
  • 34.237.69.78
  • 34.238.209.108
  • 54.83.87.1
  • 54.84.110.228
  • 54.86.129.180
  • 54.88.106.171

AWS US Sandbox
Endpoint:
https://sbagent.scribesoft.com
Static IP Addresses
  • 3.213.67.3
  • 3.229.207.198
  • 34.198.237.167
  • 34.224.153.250
  • 52.204.244.28
  • 54.146.195.161

*Azure US (Washington) / Azure West US 2 (Washington)
Endpoint:
https://us1-connect-agent-azure.scribesoft.com
Static IP Addresses
  • 13.77.173.116

AWS Europe (Ireland) / AWS Europe (Frankfurt)
eu-central-1
Endpoint:
https://agent-frankfurt.scribesoft.com
Static IP Addresses
  • 3.94.183.228
  • 3.210.164.229
  • 3.210.220.205
  • 3.219.0.211
  • 3.219.82.130
  • 3.222.1.182
  • 3.224.17.183
  • 18.204.188.169
  • 18.211.255.76
  • 34.192.161.112
  • 34.199.140.171
  • 34.230.155.160
  • 35.158.9.191
  • 35.174.159.215
  • 52.1.131.218
  • 52.2.155.242
  • 52.3.62.147
  • 52.7.200.1
  • 52.20.44.177
  • 52.23.130.182
  • 52.28.61.234
  • 52.29.220.8
  • 52.45.5.15
  • 52.58.102.181
  • 52.58.248.24
  • 52.70.64.150
  • 52.73.34.66
  • 52.73.83.188
  • 52.203.27.122
  • 52.205.243.69
  • 54.82.228.30
  • 54.86.177.217
  • 54.93.152.15
 

Note: The Azure US, AWS US East, and AWS Australia data centers are available only when working in TIBCO Cloud Integration - Connect as a capability of TIBCO Cloud ™ Integration. In TIBCO Cloud ™ Integration data centers are referred to as Regions.
 

Ports

Agent communication is outbound from your environment to the TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect Cloud over port 443.

To communicate with the TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect Cloud on status and instructions in real-time the Agent needs to attach to the TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect Service Bus over ports 443, 5671, 5672, 9350, 9351, 9352, 9353, 9354 and requires access to the following URL regardless of the Data Center: *.servicebus.windows.net

 

 Note: The Azure US and AWS Australia data centers are available only when working in TIBCO Cloud™ Integration - Connect . In TIBCO Cloud ™ Integration Data Centers are referred to as Regions.

Refer to the following Knowledge Base article to validate that the TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect Agent can connect to TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect through the required ports: TIBCO Scribe Online Check Ports in Agent Environment

NOTE: If your network policies prohibit you from opening these outbound ports, you can configure an On-Premise Agent to poll for updates and only use the Agent endpoints, such as, https://agent.scribesoft.com, https://us1-connect-agent-azure.scribesoft.com, https://au1-connect-agent-aws.scribesoft.com, or https://agent-frankfurt.scribesoft.com. This option is not a best practice and has performance implications. Contact TIBCO Support for assistance with this alternate configuration.
 

Firewall

If your business requires that you have the TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect On-Premise Agent installation behind a Proxy Server or a Firewall, the Agent may not be able to communicate with TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect or other Cloud applications. See Installing A TIBCO Scribe® Online On-Premise Agent With Proxy Servers Or Firewalls for detailed configuration instructions.
 

Applications Initiating Requests

Applications, such as Salesforce, that send requests to TIBCO Scribe® Online / TIBCO Cloud™ Integration - Connect Event Solutions containing Request / Reply and Message Maps must be able to access one of the following URLs or associated IP Addresses to automatically route the request to the appropriate Agent:
 

TIBCO Cloud Region / Data Center Provider


*AWS Australia (Sydney) / AWS Asia Pacific (Sydney): https://au1-connect-endpointaws.scribesoft.com
AWS US West (Oregon) / AWS US East (N. Virginia): https://endpoint.scribesoft.com
*AWS US East (N. Virginia) / AWS US East (N. Virginia): https://us-east.connect-endpoint.scribesoft.com/
*Azure US (Washington): https://us1-connect-endpoint-azure.scribesoft.com
AWS Europe (Ireland) / AWS Europe (Frankfurt): https://endpoint-frankfurt.scribesoft.com

 Note: The Azure US, AWS US East (N.Virginia), and AWS Australia data centers are available only when working in TIBCO Cloud™ Integration - Connect. In TIBCO Cloud ™ Integration Data Centers are referred to as Regions.
 

Management API

The TIBCO Scribe® Online UI is powered by the TIBCO Scribe® Online API. Requests made in the UI are sent to a RESTful endpoint. This endpoint can also be used by other applications. The endpoint for these communications is:
 

TIBCO Cloud Region / Data Center Provider


AWS Australia (Sydney) / AWS Asia Pacific (Sydney): https://au1-connect-api-aws.scribesoft.com
AWS US West (Oregon) / AWS US East (N. Virginia): https://api.scribesoft.com
AWS US East (N. Virginia) / AWS US East (N. Virginia): https://us-east.connect-api.scribesoft.com
AWS Europe (Ireland) / AWS Europe (Frankfurt): https://api.scribesoft.com
Azure US (Washington): https://us1-connect-api-azure.scribesoft.com

See Configuring An IS Event Solution and Setting Security Options.

SSL Certificates

TIBCO Scribe® Online uses SSL certificates for secure communications between your browser and TIBCO Scribe® Online and between the Agent and TIBCO Scribe® Online. To validate these certificates, your browser and Agent must be able to access the following URLs:

  • ComodoCA.com
  • usertrust.com



 

Issue/Introduction

You may need to whitelist some IP Addresses or URLs for successful communications. Use this article to determine which IP addresses and URLs should be whitelisted and why.