IP addresses and ports used by CrashPlan

Overview

This article lists all of the ports and IP addresses used by Code42.

Firewall access

Two firewall filtering methods are described below: FQDN-based and IP-based. The FQDN-based method is simpler to manage for most customers. The IP-based method should be used with firewalls that do not support FQDN-based filtering.

Change the firewall access based on which cloud instance you use:

FQDN-based filtering method

For the cloud instance you use, open access in your firewall to allow outbound TCP/443 to *.crashplan.com. This ensures uninterrupted access to the Code42 cloud. (You must use the IP-based filtering method to allow traffic on port 4287.)

IP-based filtering method

For the cloud instance you use, allow outbound TCP/443 and TCP/4287 to Code42 IP addresses below.

This ensures uninterrupted access to the Code42 cloud when your firewall does not support FQDN-based filtering or TLS inspection is being performed.

Code42 IP addresses

50.93.246.0/23
50.93.255.0/24
64.207.196.0/22
64.207.204.0/23
64.207.222.0/23
67.222.248.0/21
68.65.192.0/21
103.8.239.0/24
149.5.7.0/24
162.222.40.0/21
216.9.196.0/22
216.17.8.0/24
216.223.38.0/24

Code42 app ports

List of ports that require outbound traffic to Code42. You must have ports 443, 4285, and 4287 open for use by Code42 apps.

Port	Protocol	Source	Destination	Description
443	HTTPS	Code42 endpoint agents	Code42 cloud	Communication for deployment policy information
	HTTPS	Web Browsers	Code42 cloud	Web restore (both zip file and device)
	TLS	Code42 endpoint agents	Code42 cloud	Communication from device to the Code42 cloud. Only applies to Code42 environments that sign in to the Code42 console at: https://console.us2.crashplan.com.
4285	HTTPS	Web Browsers	Code42 cloud	Web restore (both zip file and device), SSO sign in, and authentication API calls.
4287	TLS	Code42 endpoint agents	Code42 cloud	Communication from the device to the Code42 cloud

Additional services integrated with Code42

These are some additional ports used by services that are commonly integrated with Code42 environments.

Port	Protocol	Source	Destination	Description
8200 and 8201	TLS	Code42 cloud	Vault	Communication between a Vault instance and the Code42 cloud
443	HTTPS	Code42 cloud	AD FS server	Sync with AD FS
636	LDAPS	The Code42 User Directory Sync tool	Your directory server	Used by the Code42 User Directory Sync tool to sync with your directory service

Revision history

The table below lists previous updates to this page.

Date	Updates
April 25, 2022	Removed instructions to allow outbound access to AWS and .code42.com. All URLs to the Code42 cloud for CrashPlan are now .crashplan.com.
March 22, 2022	Added the following IP address range to the list of Code42 IP addresses: 216.9.196.0/22 If your instance in the Code42 cloud is provisioned on or before April 5, 2022, you have until October 5, 2022 to open firewall access to this range.
September 3, 2021	Added firewall access sections.
May 5, 2021	Added the following IP address ranges to the list of Code42 IP addresses: 64.207.196.0/22 64.207.204.0/23 64.207.222.0/23 If your instance in the Code42 cloud was provisioned on or before May 5, 2021, you have until November 5, 2021 to open firewall access to these ranges.
January 21, 2021	Added Amazon Cognito Identity endpoints addresses for firewall access.
November 27, 2020	Added client login addresses.
August 12, 2020	Added a note that IP address range 149.5.44.0/24 is retired.
June 3, 2020	Revised the Code42 IP address usage details for each Code42 cloud environment.
May 8, 2020	Noted that IP addresses are scheduled to be updated August 11, 2020. For more information, see IP address updates in August 2020.
March 12, 2020	Added details for the Code42 federal environment.
January 7, 2020	Added an attention box stating that port 4282 is no longer supported.
March 13, 2019	Added new IP address range: 67.222.248.0/21 Published all IP addresses. Previously, IP addresses were only available by contacting our Customer Champions or your Customer Success Manager (CSM).