English

FAQ: What are the required firewall domain exceptions for accessing ArcGIS Online?

Question

What are the required firewall domain exceptions for accessing ArcGIS Online?

Answer

To provide high-performance and availability for ArcGIS Online basemap services, Esri utilizes the web acceleration and traffic management services of Akamai. This web acceleration service results in dynamic IP addresses being returned when connecting to ArcGIS Online, because basemaps are accessed via services.arcgisonline.com, to most efficiently route requests to the servers.

Note:
Only ArcGIS Online basemaps have static IP addresses. When static IP addresses are required, it is no longer possible to utilize Akamai services. Therefore, it is likelier to experience poorer performance. 
The following are required firewall domain exceptions for accessing ArcGIS Online:
  • Provides access to the main ArcGIS Online site and capabilities:
     http://*.arcgis.com 
     https://*.arcgis.com 
  • Provides access to basemap tiles:
     http://*.arcgisonline.com 
     https://*.arcgisonline.com 
  • Used when items are downloaded from ArcGIS Online:
     https://ago-item-storage.s3.amazonaws.com 
  • Provides access to some Esri pages that are linked to through the help documentation and is required to access the My Esri support page:
     http://*.esri.com 
     https://*.esri.com 
  • Only necessary if utilizing Bing basemaps:
     http://*.virtualearth.net 

Related Information