IT Admins | How do I whitelist Cirrus Insight?

Overview

IT departments should ensure Cirrus Insight communications and connections are whitelisted.  Whitelisting means the Cirrus Insight application, emails, IP addresses and API calls are trusted. 

Many organizations do not need to perform this work, but if your environment requires any or all of the measures below, your IT department can implement these recommendations.

Email Delivery

Cirrus Insight uses email verification for account activation and password reset.  Additionally, there are system generated communications for training and updates.  To ensure Cirrus Insight emails are always delivered and never show up in your Junk Mail folder, your IT department can whitelist "cirrusinsight.com" and "zynbit.com" on the mail server.                     

Salesforce Authentication

Salesforce has several mechanisms to prevent or allow connected apps to authenticate, please consult with your Salesforce Administrator if necessary.

Salesforce Login IP Ranges

Salesforce allows administrators to restrict the IP addresses that are allowed to log into their Salesforce environment.  If your org restricts Login IP Ranges, you will need to add Cirrus Insight’s list of IPs to your configuration.

104.45.152.60
104.45.152.13
40.114.112.50
13.82.57.205
52.188.221.42
23.96.1.109
191.238.32.104
191.238.32.154
191.238.34.67
191.238.35.12
168.62.174.199
23.96.6.200
23.96.2.128
23.96.5.238
52.168.125.188
40.85.170.52
40.85.171.66
40.85.170.185
40.85.173.250
40.85.161.170
40.85.168.95
40.85.168.67
40.76.205.226
40.76.199.45
40.76.194.38
40.76.197.83

 

Contact Manager (Group, and Professional editions) - Login IP Ranges are found under Security Controls > Session Settings (This will apply globally to all users).

Enterprise (Unlimited and Developer editions) - Login IP Ranges are managed on a per Profile basis, and will apply only to user’s with that Profile. Profiles can be managed from the Manage Users > Profiles section.

For more information, see the following  Salesforce article:

Trusted Domains

Some companies have monitoring services with their company firewall, which can block internet traffic to and from certain domains.  This will automatically block inbound and outbound traffic for unrecognized domains.  Cirrus Insight for Outlook and Gmail use the following domains.

If you are experiencing issues related to Cirrus Insight logins, please share this document with your IT department and request they add the domains below to the trusted sites list.  For Outlook users, you can first try adding these Cirrus Insight domains to your trusted sites via internet explorer.

home.cirrusinsight.com The primary site for the Cirrus Insight web portal for both users and admins.
api.cirrusinsight.com API used to authenticate to Cirrus Insight for user login and subscription; provide email tracking and web tracking data for each Cirrus Insight user; and request tracking pixels, link rewrites, email opens, link clicks, and contact web visitor history.
crmapi.cirrusinsight.com For Gmail and Outlook Web App users, this site retrieves API wrappers (basic UI protocols) for the Cirrus Insight Java Script plugins.
owa.cirrusinsight.com Web application hosting the Outlook web add-in.
socket.cirrusinsight.com Message server that allows the Sidebar to stay synchronized with the Outlook/Gmail email client.
aptrinsic.com Allows for in-app guides and enhanced product support.
gstatic.com Google service that reduces bandwidth usage and increases network performance.

 


Cirrus Insight IP Addresses for Firewall Whitelisting

104.45.152.60
104.45.152.13
40.114.112.50
13.82.57.205
52.188.221.42
23.96.1.109
168.62.174.199
23.96.6.200
23.96.2.128
23.96.5.238
191.238.32.104
191.238.32.154
191.238.34.67
191.238.35.12
52.168.125.188

40.85.170.52
40.85.171.66
40.85.170.185
40.85.173.250
40.85.161.170
40.85.168.95
40.85.168.67
40.76.91.93
40.76.95.65
40.114.116.158
40.114.119.19
40.76.93.87
23.101.138.12
40.76.65.235

 

Proxy Servers

Some companies also use a proxy server to provide administrative control over internet content.  If your company uses a proxy server then the following exceptions for Cirrus Insight should be added:

cirrusinsight.com zynbit.com
*cirrusinsight.com *.zynbit.com

 

Updated July 2021