FAQ: What Are the Required Firewall Domain Exceptions for Accessing ArcGIS Online?

Answer

To provide high-performance and availability for ArcGIS Online basemap services, Esri utilizes the web acceleration and traffic management services of Akamai. This web acceleration service results in dynamic IP addresses being returned when connecting to ArcGIS Online, because basemaps are accessed via services.arcgisonline.com, to most efficiently route requests to the servers.

Note:
Only ArcGIS Online basemaps have static IP addresses. When static IP addresses are required, it is no longer possible to utilize Akamai services. Therefore, it is likelier to experience poorer performance.

The following are required firewall domain exceptions for accessing ArcGIS Online:

Provides access to the main ArcGIS Online site and capabilities:
```
 http://*.arcgis.com 
```
```
 https://*.arcgis.com 
```

Provides access to basemap tiles:

 http://*.arcgisonline.com

 https://*.arcgisonline.com

Used when items are downloaded from ArcGIS Online:
```
 https://ago-item-storage.s3.amazonaws.com 
```
Provides access to some Esri pages that are linked to through the help documentation and is required to access the My Esri support page:
```
 http://*.esri.com 
```
```
 https://*.esri.com 
```
Only necessary if utilizing Bing basemaps:
```
 http://*.virtualearth.net 
```