Firewall configuration

All ShareFile tools use port 443.

Important!

• The inclusion of *.sharefile.io is required for future ShareFile feature releases and improved functionality.

• If you are not in a managed work environment and do not have access to an IT department, this inclusion listing is likely not going to impact your experience and no action is needed.

• For users in a managed network environment, please partner with your IT department to configure or update your domain inclusion list if needed.

• ShareFile support can allow / deny traffic to ShareFile from specified IP addresses. For more information, see Restricting users access from specific IP Ranges or Addresses.

• It is the responsibility of your IT department to ensure traffic is originating from the IP(s) specified.

Domain inclusion list

ShareFile recommends including the following domains on your whitelist when possible.

• *.sharefile.com
• *.sf-api.com
• *.sharefile.eu
• *.sf-api.eu
• *.securevdr.com
• *.sharefileftp.com
• *.sharefile.io
• *.pendo.io
• *.harness.io
• *.sharefileconnect.com
• *.sf-event.com
• *.launchdarkly.com
• sf-cv.sharefile.com
• sf-rendering.sharefile.com
• *.sf-cdn.net
• sf-cv.sharefile.eu
• sf-assets.sharefile.com
• *.novu.co
• news.sharefile.com
• products.progress.com
• inform.progress.com

ShareFile FTP information

NOTE:

• ShareFile Storagecenter Addresses - A list of IP addresses for our cloud-based storage centers is available from Amazon Web Services (AWS).

• HIPAA FTP endpoint - ftp-hipaa.sharefileftp.com is the dedicated FTP endpoint for HIPAA customer traffic. Non-HIPAA customers may also be routed to this server.

ShareFile Email notification addresses and IPs

Depending on your network environment and firewall configuration, you can allow ShareFile email communication in either of the following ways:

• Use wildcard domains: this is the fastest way to allow email from ShareFile.
• Use specific ShareFile and Progress email sender addresses: this allows for a granular configuration of the allowed email senders.
• Use email sender IP addresses: this lets you list the ShareFile and Progress IP addresses that are used for email communication.

Wildcard domains

If your email system supports wildcard domains, allow-listing the following domains is recommended and is sufficient for most environments:

*.sharefile.com
*.sf-notifications.com
*.progress.com

This covers ShareFile system notifications, security communications, product messaging, and invoice delivery. Most customers do not need to configure individual sender addresses or IPs if wildcard domains are allowed.

ShareFile and Progress email senders

If wildcard domains are not permitted, allow-list these email addresses individually as needed—they are used for ShareFile-related communications.

Customers must allow Progress domains to receive ShareFile invoice emails. Allow-listing *.progress.com ensures invoice and billing notifications are delivered.

Notification sender IPs

If wildcard domains cannot be used, allow-list the specific ShareFile notification senders below. IP addresses are included for environments that require IP-based filtering.

Note:

Allow-listing *.sf-notifications.com is preferred whenever possible.

ShareFile Control Plane IP Ranges

Allow traffic to the listed connections in the US and EU Control Plane from your on-premises environment to communicate with the ShareFile Control Plane.

Example Scenarios:

• Requests sent to ShareFile from an on-premises storage zone controllers for a health check and data transfers.

• Users initiating data transfers using ShareFile web, desktop, and mobile tools.

US Control Plane

NOTE:

The latest IP addresses added to this list are identified using bold.

EU Control Plane

NOTE:

The latest IP addresses added to this list are identified using bold.

Outgoing requests - ShareFile to client

Allow traffic to the listed connections in Outgoing requests to your on-premises environment to communicate with the ShareFile Control Plane.

Example Scenarios:

• Requests sent from ShareFile to an on-premises storage zone controllers for data transfers.

Custom SMTP IPs

Allow traffic to the listed connections to your on-premises SMTP servers.

ShareFile to Client SMTP Servers (US)

ShareFile to Client SMTP Servers (EU)