Whitelisting Requirements¶

This section summarizes the domains that should be allowed by firewalls, proxies, or other network policies to support device connectivity and access to the web applications during and after the migration to Xcelerator IAM and Gateway services.

Whitelisting for Devices / Connectivity¶

The following domains are required for device communication, firmware updates, and connectivity-related services:

• api.eu1.siemens.app
• resources.ih.eu1.siemens.app

The following domain supports future connectivity upgrades:

• *.connectivity.siemens.com

Instead of the wildcard domain, you can whitelist these specific endpoints:

• bootstrap.connectivity.siemens.com
• ota-update.connectivity.siemens.com
• mqtt.connectivity.siemens.com
• proxy.connectivity.siemens.com
• registry.connectivity.siemens.com

The following domain is required for VPN RTS connectivity endpoints:

• *.vpnrts.ih.eu1.siemens.app

Instead of the wildcard domain, you can whitelist these specific endpoints:

• connectivity.vpnrts.ih.eu1.siemens.app
• wss.vpnrts.ih.eu1.siemens.app
• s3restriction.vpnrts.ih.eu1.siemens.app

Whitelisting for Web Application Access¶

The following domains are required so users can access the migrated web applications and supporting resources:

• *.eu1.siemens.app
• static.ih.eu1.siemens.app
• *.eu1.sws.siemens.com: Required for scripts that require a token

Except where otherwise noted, content on this site is licensed under the Development License Agreement.