Control opens outgoing TCP connections to the APIs of Cloud providers, which is how it manages your Workspot Cloud deployment.
Some customers have firewalled access to their Cloud provider portals, blocking Control’s connections unless its IP addresses have been added to the portal firewall’s “Allow” list.
Control uses static IP addresses for the following tasks:
Connecting to the GCP API.
Connecting to Azure Key Vaults.
It uses dynamic IP addresses for other tasks.
List of Addresses
Currently used only for GCP and Azure Key Vault access. Other outgoing connections use dynamic source addresses.
US-based Control
Add all of the following to the “Allow” list: 35.155.126.7, 34.211.26.105, 35.162.93.177, 44.233.97.76, 18.205.90.146, 3.209.7.14, 44.199.72.73, 52.2.160.8.
EU-based Control
Add all of the following to the “Allow” list: 18.156.211.76, 18.199.187.232, 3.67.115.63, 3.120.154.111.