Firewall configuration
Configuration of your corporate firewall
GoBright users and devices several types of connections to function correctly.
Nearly every function use HTTPS to communicate outbound to the GoBright portal. But in some cases there might be exceptions for your specific case (e.g. when using on-premise Exchange).
In the overview below the different connections are show, these following ports and exceptions must be configured to make optimal use of the system.
Notes:
- ‘Inbound’ is from your corporate firewall to the GoBright platform (so inbound to GoBright platform)
- ‘Outbound’ is from the GoBright platform outbound into your corporate network
| Applicability | Port / Name | Type | Usage |
| Always | Inbound 80 (optional) |
HTTP |
Optional redirecting HTTP to HTTPS for user convenience |
| Always | Inbound 443 |
HTTPS |
Traffic over HTTPS to GoBright portal and external systems |
| Always | *.brightbooking.eu |
URL |
For calls to the GoBright API from devices |
| Always | *.gobright.com | URL | For calls to the GoBright API from devices |
| Always | *.gobright.cloud | URL | For calls to the GoBright API from devices |
| When using displays & gateways | NTP | NTP | Displays and gateways rely on NTP to get a correct date & time. |
| When using on-premise Exchange | Outbound 443 | HTTPS | Connecting to the EWS of the on-premise Exchange |
| When using on-premise Exchange | Inbound 443 to *.gobright.cloud | HTTPS | Sending change notifications from on-premise Exchange to GoBright API |
Please consult your IT department whether the connections above are allowed and accessible.
Advanced: Filtering inbound/outbound traffic based on IP-addresses
We publish our public IP-addresses, for advanced filtering requirements. If you implement ip filtering on your firewalls and systems, see the guidance below, and make sure to be subscribed to our status page for any changes in the IP addresses.
Change process of IP addresses
The IP addresses are static, but in some cases we need to commission or decommission IP addresses. This will be published as ‘maintenance’ on our status page, typically at least 1 week before the change becomes active.
Please make sure to subscripe to the status page, by signing up via the ‘get updates’ button on the status page, you will be updated if maintenance is published (e.g. if IP addresses change).
Notes:
- ‘Inbound’ is from the internet into the GoBright platform, e.g. a user or GoBright device connecting to the GoBright platform.
- ‘Outbound’ is from the GoBright platform to the internet, e.g. GoBright platform connecting to Office 365 / Microsoft 365 to synchronize data.
| Direction | IP address | State | Notes |
| Inbound | 13.69.68.10 |
Active |
– |
| Inbound | 52.137.36.77 |
Active |
– |
| Inbound | 52.166.220.108 |
Active |
– |
| Inbound | 52.236.160.173 | Active | – |
| Inbound | 20.93.228.151 | Active | – |
| Inbound | 83.247.25.210 | Inactive | Not in use anymore, will be fully de-commisioned on: December 24, 2021 at 01:00 AM CET |
| Inbound | 83.247.25.211 | Inactive | |
| Outbound | 52.233.130.50 | Active | |
| Outbound | 52.233.128.61 | Active | |
| Outbound | 52.233.135.180 | Active | |
| Outbound | 52.233.131.224 | Active | |
| Outbound | 52.233.135.227 | Active | |
| Outbound | 52.233.129.243 | Active | |
| Outbound | 52.233.128.247 | Active | |
| Outbound | 51.105.186.108 | Active | In use since: December 24, 2021 |
| Outbound | 51.105.189.190 | Active | |
| Outbound | 51.105.189.241 | Active | |
| Outbound | 51.105.190.95 | Active | |
| Outbound | 51.105.191.129 | Active | |
| Outbound | 51.105.191.194 | Active | |
| Outbound | 20.50.160.22 | Active | |
| Outbound | 20.50.160.101 | Active | |
| Outbound | 20.50.160.125 | Active | |
| Outbound | 20.50.160.226 | Active | |
| Outbound | 20.50.161.8 | Active | |
| Outbound | 20.50.161.228 | Active | |
| Outbound | 20.50.161.239 | Active | |
| Outbound | 20.50.162.22 | Active | |
| Outbound | 20.50.162.51 | Active | |
| Outbound | 20.50.162.110 | Active | |
| Outbound | 20.50.162.162 | Active | |
| Outbound | 20.50.162.165 | Active | |
| Outbound | 20.50.162.180 | Active | |
| Outbound | 20.50.162.200 | Active | |
| Outbound | 20.50.163.110 | Active | |
| Outbound | 20.50.163.135 | Active | |
| Outbound | 20.50.163.143 | Active | |
| Outbound | 20.50.163.167 | Active | |
| Outbound | 20.50.163.240 | Active | |
| Outbound | 20.50.163.255 | Active | |
| Outbound | 20.50.164.22 | Active | |
| Outbound | 20.50.164.48 | Active | |
| Outbound | 20.50.164.54 | Active | |
| Outbound | 20.50.164.119 | Active | |
| Outbound | 20.50.2.45 | Active | |
| Outbound | 20.76.202.176 | Active | In use since: December 8, 2022 |
| Outbound | 20.76.202.219 | Active | |
| Outbound | 20.76.202.251 | Active | |
| Outbound | 20.76.203.229 | Active | |
| Outbound | 20.76.205.16 | Active | |
| Outbound | 20.76.205.70 | Active | |
| Outbound | 20.101.200.78 | Active | |
| Outbound | 20.101.200.94 | Active | |
| Outbound | 20.101.200.121 | Active | |
| Outbound | 20.101.200.155 | Active | |
| Outbound | 20.101.200.187 | Active | |
| Outbound | 20.101.200.225 | Active | |
| Outbound | 20.101.200.229 | Active | |
| Outbound | 20.101.200.231 | Active | |
| Outbound | 20.101.200.232 | Active | |
| Outbound | 20.101.200.244 | Active | |
| Outbound | 20.101.200.245 | Active | |
| Outbound | 20.101.201.1 | Active | |
| Outbound | 20.101.201.4 | Active | |
| Outbound | 20.101.201.5 | Active | |
| Outbound | 20.101.201.11 | Active | |
| Outbound | 20.101.201.14 | Active | |
| Outbound | 20.101.201.21 | Active | |
| Outbound | 20.101.201.31 | Active | |
| Outbound | 20.101.201.33 | Active | |
| Outbound | 20.101.201.34 | Active | |
| Outbound | 20.101.201.38 | Active | |
| Outbound | 20.101.201.60 | Active | |
| Outbound | 20.101.201.73 | Active | |
| Outbound | 20.101.201.110 | Active | |
| Outbound | 20.50.2.79 | Active |
To see IP addresses we have used before, but are now decommissioned, please click the accordion below.
| Direction | IP address | State | Notes |
| Inbound | 83.247.25.210 | Decommissioned | Not in use anymore, fully decommisioned since: December 24, 2021 at 01:00 AM CET |
| Inbound | 83.247.25.211 | Decommissioned | |
| Outbound | 83.247.25.69 | Decommissioning | Not in use anymore, fully decommisioned since: December 24, 2021 at 01:00 AM CET |
| Outbound | 83.247.25.70 | Decommissioning | |
| Outbound | 217.67.237.72 | Decommissioning | |
| Outbound | 83.247.25.83 | Decommissioning | |
| Outbound | 83.247.25.121 | Decommissioning | |
| Outbound | 83.247.25.210 | Decommissioning |