Which domains do we add to our network's 'Allowed List' to ensure access to Procore?
Answer
If your organisation has networking rules in place to block access or requests from certain websites, your company's IT department may need to adjust your network's allowed list to ensure that Procore is fully accessible from your environment. To learn more see:
Important
The IP addresses that host the Procore application will be changing, starting on August 29, 2023. These changes will impact all environments, including but not limited to Procore's production, monthly sandbox and developer sandbox environments. See Allowed IP Addresses below for more information.
As a best practice, Procore recommends you do NOT manage your allowed list by IP address and use the Allowed Domains below instead.
Allowed Domains
Procore recommends using a wildcard rule for the primary domains used by Procore, including:
- .procore.com
- .fastly.net
Additionally, Procore recommends approving the following domains to ensure the application is fully accessible.
Note: Domains marked with an asterisk (*) do not require you to add each sub-domain.
This list is not exhaustive and is subject to change.
- *.procore.com
- assets0.procore.com
- assets1.procore.com
- assets2.procore.com
- assets3.procore.com
- api.procore.com
- app.procore.com
- education.procore.com
- events.procore.com
- learn.procore.com
- login.procore.com
- my.procore.com
- storage.procore.com
- support.procore.com
- us02.procore.com
- *.cdn.procore.com
- *.pages.procore.com
- *.fastly.net
- u2.shared.global.fastly.net
- procore-login-assets0.global.ssl.fastly.net
- procore-login-assets1.global.ssl.fastly.net
- procore-login-assets2.global.ssl.fastly.net
- procore-login-assets3.global.ssl.fastly.net
- procore-login-assets0.freetls.fastly.net
- procore-login-assets1.freetls.fastly.net
- procore-login-assets2.freetls.fastly.net
- procore-login-assets3.freetls.fastly.net
- procore-my-assets0.global.ssl.fastly.net
- procore-my-assets1.global.ssl.fastly.net
- procore-my-assets2.global.ssl.fastly.net
- procore-my-assets3.global.ssl.fastly.net
- procore-my-assets0.freetls.fastly.net
- procore-my-assets1.freetls.fastly.net
- procore-my-assets2.freetls.fastly.net
- procore-my-assets3.freetls.fastly.net
- procore-production-assets0.global.ssl.fastly.net
- procore-production-assets1.global.ssl.fastly.net
- procore-production-assets2.global.ssl.fastly.net
- procore-production-assets3.global.ssl.fastly.net
- procore-production-assets0.freetls.fastly.net
- procore-production-assets1.freetls.fastly.net
- procore-production-assets2.freetls.fastly.net
- procore-production-assets3.freetls.fastly.net
- procore-production-us02-assets0.global.ssl.fastly.net
- procore-production-us02-assets1.global.ssl.fastly.net
- procore-production-us02-assets2.global.ssl.fastly.net
- procore-production-us02-assets3.global.ssl.fastly.net
- procore-production-us02-assets0.freetls.fastly.net
- procore-production-us02-assets1.freetls.fastly.net
- procore-production-us02-assets2.freetls.fastly.net
- procore-production-us02-assets3.freetls.fastly.net
- procore-core.global.ssl.fastly.net
- procore-core.freetls.fastly.net
- Js-agent.newrelic.com
- www.google.com
- www.google-analytics.com
- *.uservoice.com
- *.salesforceliveagent.com
- fonts.googleapis.com
- consent.truste.com
- rs.fullstory.com
- s3.amazonaws.com
- fonts.gstatic.com
- cloudflare.com
- maxcdn.bootstrapcdn.com
- bam.nr-data.net
- www.glancecdn.net
- widget.uservoice.com
- by2.uservoice.com
- d3sbxpiag177w8.cloudfront.net
- files.mtstatic.com
- a.mtstatic.com
- d.la4-c2-was.salesforceliveagent.com
- c.la4-c2-was.salesforceliveagent.com
- *.launchdarkly.com
- *.bugsnag.com
- *.pendo.io
Network Ports and Protocols
All communication with Procore is accomplished using the HTTPS and Transport Layer Security (TLS) protocols. All communication happens over port 443. Real time updates in certain client applications occur over the WebSocket Secure protocol, also on port 443.
Allowed IP Addresses
While you can choose to manage your network's allowed list by IP address, Procore recommends you do NOT manage your allowed list by IP address and use the domains above instead. The IP addresses below are available to you in the event that your company's internal standard operating procedures or the limitations of your network environment do not allow you to manage your allowed list by domain.
The IP addresses that host the Procore application will be changing, starting on August 29, 2023. These changes will impact all environments, including but not limited to Procore's production, monthly sandbox and developer sandbox environments.
- Cutover to new IP addresses for sandbox environments will begin on August 29, 2023.
- Cutover to new IP addresses for production environments will begin on September 25, 2023.
- Cutover is expected to be complete on October 1, 2023.
Notes: Your company's 'Sandbox Test Project' is hosted in the production environment and is not considered a 'sandbox environment' for the purposes of this change. All dates are subject to change.
The new IP addresses are:
- 162.159.140.86
- 172.66.0.84
- 2606:4700:7::54
- 2a06:98c1:58::54
The IP addresses that currently host the Procore application must remain on your allowed list until the cutover to the new IP addresses listed above is complete. During this transition, you must keep both current and future IP addresses on your allowed list to avoid service interruption. When the cutover is complete, the current IP addresses listed can be removed.