product icon

What should I allow on my firewall for GoToAssist Corporate?

    Learn what ports, IP addresses, domains, etc. need to be allowed on your firewall for your service to successfully connect and work with GoTo.

    Subscribe to notifications in our Customer Community to be kept up to date on any changes to this important information.

    Required Email Domains

    • @goto.com
    • @logmein.com
    • customerservice@s.logmein.com
    • @care.gotoassist.com
    • @m.logmein.com
    • @t.logmein.com

    Required Ports

    • Outbound TCP 443
    • Outbound TCP 80
    • STUN/TURN - TCP and UDP 3489 — GoTo Resolve and GoToAssist v5 only

    Required Domains

    Universal Domains Additional Product Specific Domains
    GoToAssist Remote Support v.4 GoToAssist Remote Support v.5 GoToAssist SeeIt GoToAssist Corporate
    Required:

    *.goto.com

    *.getgo.com

    *.ingest.sentry.io

    *.logmein.com

    *.logmeininc.com

    Required:

    *.gotoassist.com

    *.fastsupport.com

    *.cloudfront.net

    helpme.net

    *.expertcity.com

    Note: The following domains will be required starting February 19, 2023.

    *getgo.cdn

    *.gofastchat.com

    cdn.goto.com

    cdn.getgo.com

    getgo.com

    Required:

    *.fastsupport.com

    helpme.net

    Required:

    *.gotoassist.com

    *.tokbox.com

    static.opentok.com

    enterprise.opentok.com

    api.opentok.com

    anvil.opentok.com

    hlg.toxbox.com

    Required:

    *.gotoassist.com

    *.gotoassist.me

    *.gotoassist.at

    *.gofastchat.com

    *.desktopstreaming.com

    Note: The following domains will be required starting February 19, 2023.

    *getgo.cdn

    cdn.goto.com

    cdn.getgo.com

    getgo.com

    Optional:

    N/A

    Optional:

    *.google-analytics.com

    *filepicker.io

    *wootric.com

    Optional:

    *.segment.io

    *.segment.com

    *.amplitude.com

    Optional:

    N/A

    Optional:

    N/A

    GoTo server / Data Center IP addresses for use in firewall configurations

    The following IP ranges may be used by any GoTo product, so they should all be added to your allowlist. See below for additional GoTo product-specific ranges.

    Equivalent specifications in 3 common formats

    Assigned Range by Block Numeric IP Address Range Netmask Notation CIDR Notation
    Block 1 216.115.208.0 – 216.115.223.255 216.115.208.0 255.255.240.0 216.115.208.0/20
    Block 2 216.219.112.0 – 216.219.127.255 216.219.112.0 255.255.240.0 216.219.112.0/20
    Block 3 67.217.64.0 – 67.217.95.255 67.217.64.0 255.255.224.0 67.217.64.0/19
    Block 4 173.199.0.0 – 173.199.63.255 173.199.0.0 255.255.192.0 173.199.0.0/18
    Block 5 206.183.100.0 – 206.183.103.255 206.183.100.0 255.255.252.0 206.183.100.0/22
    Block 6 68.64.0.0 – 68.64.31.255 68.64.0.0 255.255.224.0 68.64.0.0/19
    Block 7 23.239.224.0 – 23.239.255.255 23.239.224.0 255.255.224.0 23.239.224.0/19
    Block 8 158.120.16.0 - 158.120.31.255 158.120.16.0 255.255.240.0 158.120.16.0/20
    Block 9 202.173.24.0 – 202.173.31.255 202.173.24.0 255.255.248.0 202.173.24.0/21
    Block 10 78.108.112.0 – 78.108.127.255 78.108.112.0 255.255.240.0 78.108.112.0/20
    Block 11 185.36.20.0 – 185.36.23.255 185.36.20.0 255.255.252.0 185.36.20.0/22
    Block 12 188.66.40.0 – 188.66.47.255 188.66.40.0 255.255.248.0 188.66.40.0/21
    Block 13 45.12.196.0 – 45.12.199.255 45.12.196.0 255.255.252.0 45.12.196.0/22
    Block 14 162.250.60.0 – 162.250.63.255 162.250.60.0 255.255.252.0 162.250.60.0/22
    Block 15 199.36.248.0 – 199.36.251.255 199.36.248.0 255.255.252.0 199.36.248.0/22
    Block 16 199.87.120.0 – 199.87.123.255 199.87.120.0 255.255.252.0 199.87.120.0/22
    Block 17 103.15.16.0 – 103.15.19.255 103.15.16.0 255.255.252.0 103.15.16.0/22
    Block 18 64.74.17.0 – 64.74.17.255 64.74.17.0 255.255.255.0 64.74.17.0/24
    Block 19 64.74.18.0 – 64.74.19.255 64.74.18.0 255.255.254.0 64.74.18.0/23
    Block 20 64.74.103.0 – 64.74.103.255 64.74.103.0 255.255.255.0 64.74.103.0/24
    Block 21 64.94.18.0 – 64.94.18.255 64.94.18.0 255.255.255.0 64.94.18.0/24
    Block 22 64.94.46.0 – 64.94.47.255 64.94.46.0 255.255.254.0 64.94.46.0/23
    Block 23 64.95.128.0 – 64.95.129.255 64.95.128.0 255.255.254.0 64.95.128.0/23
    Block 24 66.150.108.0 – 66.150.108.255 66.150.108.0 255.255.255.0 66.150.108.0/24
    Block 25 69.25.20.0 – 69.25.21.255 69.25.20.0 255.255.254.0 69.25.20.0/23
    Block 26 69.25.247.0 – 69.25.247.255 69.25.247.0 255.255.255.0 69.25.247.0/24
    Block 27 95.172.70.0 – 95.172.70.255 95.172.70.0 255.255.255.0 95.172.70.0/24
    Block 28 111.221.57.0 – 111.221.57.255 111.221.57.0 255.255.255.0 111.221.57.0/24

    IPv6 addresses space

    Assigned by Block Classless Inter-Domain Routing (CIDR) format
    Block 1 2606:CB00::/32
    Block 2 2a0e:bd00::/29

    Additional IP addresses required for using GoToAssist Remote Support v.4

    Allow these additional IP addresses if your firewall is configured to allow list by IP range rather than domains:

    • 52.23.109.85
    • 34.194.20.78
    • 54.224.37.110
    • 52.205.68.9
    • 3.221.98.226
    • 54.157.60.139
    • 3.218.246.74
    • 52.55.102.23

    Required IP Addresses

    Fastpath: This is not for use with GoTo Resolve. If you are using GoTo Resolve, see Fixed IP Addresses below for the relevant TURN server information you need.

    It is recommended to use wild card rules whenever possible while allow listing or blocking any GoTo services on your network as sub-domains of the domains listed above are included. Also, the client-to-host connection uses peer-to-peer connections, encrypted within an HTTPS tunnel where data is encrypted with AES-256 symmetric cipher.

    Use of IP ranges instead of domain names for the firewall configuration is discouraged unless absolutely necessary because our IP ranges and those of our provider networks need to be periodically audited and modified, creating additional maintenance for your network. These changes are necessary to continue to provide the maximum performance for our products. Maintenance and failover events within our infrastructure may cause you to connect to servers within any of the ranges.

    If your firewall includes a content or application data scanning filter, this may cause a block or latency, which would be indicated in the log files for the filter. To address this problem, verify that the domains or IP ranges will not be scanned or filtered by specifying exception domains or IP ranges. If your security policy requires you to specify explicit domain or IP ranges, then configure your firewall exceptions for outbound TCP ports 8200, 443, and 80 as well as UDP ports 8200 and 1853 for the GoTo domains or IP ranges, including those of our third-party provider networks.

    Third-party provider IP Ranges

    Fixed IP addresses — For GoToAssist RS v.5 only

    Table 1. TURN/STUN Server IP list
    ap-southeast-1 eu-central-1 eu-central-1 eu-central-1 eu-central-1 (EU-only environment)

    175.41.141.140

    54.255.100.96

    18.140.137.139

    54.255.48.58

    3.122.32.27

    18.158.218.2

    18.158.121.211

    52.28.148.85

    54.227.77.39

    54.204.126.154

    50.17.158.207

    3.230.232.226

    52.54.244.43

    54.146.34.187

    54.185.112.207

    52.13.255.230

    44.232.77.24

    44.229.217.227

    54.189.249.52

    52.35.84.247

    18.198.174.137

    18.198.147.201

    18.192.225.252

    18.198.176.236

    Data Centers

    We scale our services with third-party cloud and carrier networks for improved performance. To ensure continuous up-time, we also maintain data centers in the following regions:

    • U.S.: Nevada, Virginia, Michigan
    • Global: Germany, Australia
    • Global Public Cloud (including, but not limited to): California, Oregon, Virginia, Singapore, Australia, Japan
    • Content Delivery Public Cloud (including, but not limited to): California, Washington, Texas, Indiana, Missouri, New Jersey, Brazil, United Kingdom, Amsterdam, Germany, France, Italy, Hong Kong, Japan, Singapore
    Article last updated: 21 February, 2023