IT Admins | How do I add Cirrus Insight to trusted/allowed lists?

Overview

IT departments should allow Cirrus Insight communications and connections to ensure users have full access and functionality.  The Cirrus Insight application, emails, IP addresses and API calls should be added to trusted/allowed lists. 

Many organizations do not need to perform this work, but if your environment requires any or all of the measures below, your IT department can implement these recommendations.

Email Delivery

Cirrus Insight uses email verification for account activation and password reset.  Additionally, there are system generated communications for training and updates.  To ensure Cirrus Insight emails are always delivered and never show up in your Junk Mail folder, your IT department can allow "cirrusinsight.com" and "zynbit.com" on the mail server.                     

Salesforce App Authentication

Salesforce has several mechanisms to prevent or allow connected apps to authenticate. Consult with your Salesforce Administrator if necessary.

Salesforce Login IP Ranges

Salesforce allows administrators to restrict the IP addresses that are allowed to log into their Salesforce environment.  If your org restricts Login IP Ranges, you will need to add Cirrus Insight’s list of IPs to your configuration.

Sidebar

52.188.221.42
104.45.152.60
40.76.91.93
40.76.95.65
40.114.116.158
40.114.119.19
40.76.93.87
23.101.138.12
40.76.65.235

Sync

52.168.125.188
40.85.170.52
40.85.171.66
40.85.170.185
40.85.161.170
40.85.168.95
40.85.168.67
52.226.192.207
52.226.192.218
52.226.193.35
52.226.194.192
52.226.194.231
52.226.195.104
52.226.196.123
52.226.196.252
52.226.197.35
52.226.197.48
52.226.197.64
52.226.197.142
40.85.173.250

 

 Implementing Login IP Ranges

  • Contact Manager (Group, and Professional editions) - Login IP Ranges are found under Security Controls > Session Settings (This will apply globally to all users).
  • Enterprise (Unlimited and Developer editions) - Login IP Ranges are managed on a per Profile basis, and will apply only to user’s with that Profile. Profiles can be managed from the Manage Users > Profiles section.
  • For more information, see the following  Salesforce article:

Trusted Domains

Some companies have monitoring services with their company firewall, which can block internet traffic to and from certain domains.  This will automatically block inbound and outbound traffic for unrecognized domains.  Cirrus Insight for Outlook and Gmail use the domains listed below.

If you are experiencing issues related to Cirrus Insight logins, please share this document with your IT department and request they add the domains below to the trusted sites list.  For Outlook users, you can first try adding these Cirrus Insight domains to your trusted sites via internet Explorer.

home.cirrusinsight.com
The primary site for the Cirrus Insight web portal for both users and admins.
api.cirrusinsight.com
API used to authenticate to Cirrus Insight for user login and subscription; provide email tracking and web tracking data for each Cirrus Insight user; and request tracking pixels, link rewrites, email opens, link clicks, and contact web visitor history.
crmapi.cirrusinsight.com
For Gmail and Outlook Web App users, this site retrieves API wrappers (basic UI protocols) for the Cirrus Insight Java Script plugins.
owa.cirrusinsight.com
Web application hosting the Outlook web add-in.
socket.cirrusinsight.com
Message server that allows the Sidebar to stay synchronized with the Outlook/Gmail email client.
aptrinsic.com
Allows for in-app guides and enhanced product support.
gstatic.com
Google service that reduces bandwidth usage and increases network performance.
cirrustracking.com Used for Buyer Signals (Email/Link/Reply Tracking).

Firewall IP Addresses

The following IP addresses should be allowed to pass through the firewall.

40.114.112.50

Chrome Extension (for Gmail)
104.45.152.60
Email Tracking
104.45.152.13
Email Tracking
20.231.192.104 Reply Tracking, Email Blast

 

Proxy Servers

Some companies also use a proxy server to provide administrative control over internet content.  If your company uses a proxy server then the following exceptions for Cirrus Insight should be added:

cirrusinsight.com zynbit.com
*cirrusinsight.com *.zynbit.com

 

Updated Aug. 2022