SAP Knowledge Base Article - Public

2740072 - Determining IP Range For Groupware Server Side Integration

Symptom

You need the IP range used by the Groupware Server Side Integration for any reason, as for example, add to allowlist the addresses in their firewall.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

SAP Cloud For Customer

Resolution

Please follow the below steps to check the IP range for server side integration.

Getting the Scale Unit (SU):

  1. Download and extract the file determine_su.zip (Found in the Attachments section of this KBA).
  2. Launch the file su.bat.
  3. Paste/Type the tenant URL in format myXXXXXX.crm.ondemand.com.
  4. The tenant name will be displayed as in the below screenshot and the Scale Unit will be the highlighted as part of the information. On this example "fratest".

  fratest.png

Getting the IP Range:

  1. Search the below table using the Scale Unit (SU) you found.
  2. Get the respective IPs of that given Scale Unit (SU), both worker and web resources (see column 'Resource' below).

Productive landscape :
Location
SU
Resource
Main location
List of PIPs in IP range
DR location
List of PIPs in IP range
Website (public DNS)
WDC Wdcprod01 web, worker

40.89.246.90/31

 40.89.246.90,
40.89.246.91		 20.81.29.60/31 20.81.29.60,
20.81.29.61		 sapcfc-sap-wdcprod01-sync.c4c.invisiblesolutions.com
WDC Wdctest01 web, worker

52.186.90.126/31

 52.186.90.126,
52.186.90.127		 20.84.212.112/31 20.84.212.112,
20.84.212.113		 sapcfc-sap-wdctest01-sync.c4c.invisiblesolutions.com
PER Perprod01 web, worker

40.115.90.12/31

 40.115.90.12,
40.115.90.13		 20.193.1.176/31 20.193.1.176,
20.193.1.177		 sapcfc-sap-perprod01-sync.c4c.invisiblesolutions.com
PER Pertest01 web, worker 20.53.187.192/31 20.53.187.192,
20.53.187.193		 13.70.173.238/31 13.70.173.238,
13.70.173.239		 sapcfc-sap-pertest01-sync.c4c.invisiblesolutions.com
FRA

Fraprod01-05

Fratest01

 web, worker

20.79.94.108/30

20.79.101.104/30

20.52.203.122/31

20.79.94.108,
20.79.94.109,
20.79.94.110,
20.79.94.111

20.79.101.104,
20.79.101.105,
20.79.101.106,
20.79.101.107

20.52.203.122,
20.52.203.123,
20.52.203.124,
20.52.203.125

20.50.236.104/30

20.54.192.120/30

51.105.215.150/31

20.50.236.104,
20.50.236.105,
20.50.236.106,
20.50.236.107

20.54.192.120,
20.54.192.121,
20.54.192.122,
20.54.192.123

51.105.215.150,
51.105.215.151,
51.105.215.152,
51.105.215.153

sapcfc-sap-fraprod[01..05]-sync.c4c.invisiblesolutions.com

sapcfc-sap-fratest01-sync.c4c.invisiblesolutions.com


The CDNs are the same for all scale units so you may use the list of CDNs below to allowlist the corresponding CDNs as well:PLEASE NOTE: Should you face any issues regarding the .bat file provided, kindly open an case with SAP Cloud Product support.

Add-In CDNs:

maxcdn.bootstrapcdn.com

code.jquery.com

cdnjs.cloudflare.com

appsforoffice.microsoft.com

unpkg.com

cdnjs.cloudflare.com

Server-side Sync CDNs:

cdnjs.cloudflare.com

fonts.googleapis.com

maxcdn.bootstrapcdn.com

cdn.jsdelivr.net ajax.googleapis.com

Telemetry:

az416426.vo.msecnd.net

OAuth:

https://login.windows.net

https://outlook.office365.com

Other:

https://invisiblesolutions.com

https://revenuegrid.com

sapc4c-integration-noreply@notifications.revenuegrid.com

https://appsforoffice.microsoft.com/lib/1.1/hosted/office.js

https//az416426.vo.msecnd.net/scripts/a/ai.0.js

(Your tenant URL)

Your EWS URL and json metadata URLs in case of on-prem Exchange

Keywords

Groupware; Server Side Integration; IP Range; Azure; Static IP; Firewall; Outlook; CDN; , KBA , ssi ip range , ip range , whitelist , azure , LOD-CRM-GW-SRV , Server side groupware intergration , How To

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions

Attachments

determine_su.zip