Frequently asked question

What are the required firewall domain exceptions for accessing ArcGIS Online?

Last Published: April 25, 2020

Answer

To provide high-performance and availability for ArcGIS Online basemap services, Esri utilizes the web acceleration and traffic management services of Akamai. This web acceleration service results in dynamic IP addresses being returned when connecting to ArcGIS Online, because basemaps are accessed via services.arcgisonline.com, to most efficiently route requests to the servers.
Note:
Only ArcGIS Online basemaps have static IP addresses. When static IP addresses are required, it is no longer possible to utilize Akamai services. Therefore, it is likelier to experience poorer performance. 
The following are required firewall domain exceptions for accessing ArcGIS Online:
  • Provides access to the main ArcGIS Online site and capabilities:
     http://*.arcgis.com 
     https://*.arcgis.com 
  • Provides access to basemap tiles:
     http://*.arcgisonline.com 
     https://*.arcgisonline.com 
  • Used when items are downloaded from ArcGIS Online:
     https://ago-item-storage.s3.amazonaws.com 
  • Provides access to some Esri pages that are linked to through the help documentation and is required to access the My Esri support page:
     http://*.esri.com 
     https://*.esri.com 
  • Only necessary if utilizing Bing basemaps:
     http://*.virtualearth.net 

Article ID:000012925

Software:
  • ArcGIS Desktop 1
  • ArcGIS Online

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options

Related Information

Discover more on this topic