What are the optimal firewall configurations?

This page covers information involving the servers used for our GoTo products (GoToMeeting, GoToWebinar, GoToTraining, GoToAssist, GoToMyPC, and OpenVoice). Also see Whitelisting and LogMeIn for additional information on our other LogMeIn products.

Note: Also see our Customer Community to subscribe to notifications when firewall information is updated (click Follow to subscribe).

Our GoTo products are configured to work through outbound TCP ports 8200, 443 and 80, as well as UDP ports 8200 and 1853. Our products do not require any inbound connections. Outbound TCP port 443 is required in all cases. Connections via outbound TCP port 8200 are optimal for in-session communication, although TCP ports 443 and 80 can also be used. Optimal audio and video require that the UDP ports also be open.

Integrated Voice over IP (VoIP) connections are configured to work outbound through UDP port 8200. Integrated webcam video support is configured through UDP port 1853.

For InRoom Link video conference systems, configure your corporate firewall to enable the following send ports - 1720 TCP, 3000-4000 TCP, and 3000-4000 UDP. You can keep these ports closed when you are not using InRoom Link.

For most firewall or proxy systems, we recommend specifying a whitelist of DNS names for GoTo services so outbound connections can be made. The list of GoTo domains currently includes (but is not limited to) the following:

DomainDescription/Purpose
*.assist.comProduct domain used by GoToAssist
api.filepicker.ioThird-party file-hosting service used by multiple GoTo products
Note: This will soon change to *.filestackapi.com.
*.citrixonline.comCorporate domain used by multiple GoTo products (until 12/4/17)
*.citrixonlinecdn.comContent delivery network (CDN) used by multiple GoTo products (until 12/4/17)
*.cloudfront.netThird-party CDN used by multiple GoTo products
*.expertcity.comCorporate domain used by multiple GoTo products
*.fastsupport.comProduct domain used by GoToAssist
*.filestackapi.comThird-party file-hosting service used by multiple GoTo products
(NEW! FilePicker has changed their name)
*.getgo.comProduct domain used by multiple GoTo products
*.getgocdn.comCDN used by multiple GoTo products
*.getgoservices.comProduct domain used by multiple GoTo products
*.getgoservices.netProduct domain used by multiple GoTo products
*.go2assist.meProduct domain used by GoToAssist
*.gofastchat.comProduct domain used by GoToAssist
*.goto-rtc.comReal-time communication service used by multiple GoTo products
*.gotoassist.comProduct domain used by GoToAssist
*.gotoassist.atProduct domain used by GoToAssist
*.gotoassist.meProduct domain used by GoToAssist
*.gotomeet.atProduct domain used by GoToMeeting
*.gotomeet.meProduct domain used by GoToMeeting
*.gotomeeting.comProduct domain used by GoToMeeting
*.gotomypc.comProduct domain used by GoToMyPC
*.gotostage.comProduct domain used by GoToStage
*.gototraining.comProduct domain used by GoToTraining
*.gotowebinar.comProduct domain used by GoToWebinar
*.helpme.netProduct domain used by GoToAssist
*.joingotomeeting.comProduct domain used by GoToMeeting
*.jointraining.comProduct domain used by GoToTraining
*.joinwebinar.comProduct domain used by GoToWebinar
*.logmein.comProduct domain used by LogMeIn (product)
*.logmeininc.comCorporate domain used by multiple GoTo products
*.openvoice.comProduct domain used by OpenVoice, GoToMeeting and join.me
*.osdimg.comCDN used by multiple GoTo products (until 12/4/17)
*.raas.ioReal-time communication service used by multiple GoTo products
*.webinar.comProduct domain used by GoToWebinar

Important Note: Use of IP ranges instead of domain names for the firewall configuration are discouraged unless absolutely necessary because our IP ranges and those of our provider networks need to be periodically audited and modified, creating additional maintenance for your network. These changes are necessary to continue to provide the maximum performance for our GoTo products. Maintenance and failover events may cause you to connect to servers within any of the ranges.

If your firewall includes a content or application data scanning filter, this may cause blocking or latency, which would be indicated in the log files for the filter. To address this problem, verify the domains or IP ranges will not be scanned or filtered by specifying exception domains or IP ranges that will not be filtered. If your security policy requires you to specify explicit domain or IP ranges, then configure your firewall exceptions for outbound TCP ports 8200, 443 and 80, as well as UDP ports 8200 and 1853 for the LogMeIn domains or IP ranges, including those of our provider networks given below.

GoTo server / Datacenter IP addresses for use in firewall configurations
Equivalent specifications in 3 common formats
Assigned
Range by Block
Numeric IP
Address Range
Netmask NotationCIDR Notation
Block 1216.115.208.0 - 216.115.223.255216.115.208.0 255.255.240.0216.115.208.0/20
Block 2216.219.112.0 - 216.219.127.255216.219.112.0 255.255.240.0216.219.112.0/20
Block 366.151.158.0 - 66.151.158.25566.151.158.0 255.255.255.066.151.158.0/24
Block 466.151.150.160 - 66.151.150.19166.151.150.160 255.255.255.22466.151.150.160/27
Block 566.151.115.128 - 66.151.115.19166.151.115.128 255.255.255.19266.151.115.128/26
Block 664.74.80.0 - 64.74.80.25564.74.80.0 255.255.255.064.74.80.0/24
Block 7202.173.24.0 - 202.173.31.255202.173.24.0 255.255.248.0202.173.24.0/21
Block 867.217.64.0 - 67.217.95.25567.217.64.0 255.255.224.067.217.64.0/19
Block 978.108.112.0 - 78.108.127.25578.108.112.0 255.255.240.078.108.112.0/20
Block 1068.64.0.0 - 68.64.31.25568.64.0.0 255.255.224.068.64.0.0/19
Block 11206.183.100.0 - 206.183.103.255206.183.100.0 255.255.252.0206.183.100.0/22
Block 12173.199.0.0 - 173.199.63.255173.199.0.0 255.255.192.0173.199.0.0/18
Block 13103.15.16.0 - 103.15.19.255103.15.16.0 255.255.252.0103.15.16.0/22
Block 14180.153.30.0 - 180.153.31.255180.153.30.0 255.255.254.0180.153.30.0/23
Block 1523.239.224.0 - 23.239.255.25523.239.224.0 255.255.224.023.239.224.0/19
Block 16185.36.20.0 - 185.36.23.255185.36.20.0 255.255.252.0185.36.20.0/22
Block 17188.66.40.0 - 188.66.47.255188.66.40.0 255.255.248.0188.66.40.0/21
IPv6 addresses space
Assigned
Range by Block
Classless Inter-Domain Routing (CIDR) format
Block 12620:0:c70::/48
Block 22a04:6660::/30

We scale our services into third-party cloud and carrier networks for improved performance. To ensure continuous up-time, we also maintain data centers in the following regions:

  • U.S.: Nevada, Virginia
  • Global: Germany, India
  • Global Public Cloud (including, but not limited to): California, Oregon, Virginia, Singapore, Australia, Japan
  • Content Delivery Public Cloud (including, but not limited to): California, Washington, Texas, Indiana, Missouri, New Jersey, Brazil, United Kingdom, Amsterdam, Germany, France, Italy Hong Kong, Japan, Singapore, China

IP ranges for the content delivery network (CDN)

IP ranges for other services (audio, video and screen sharing)

IP ranges for Cloudflare (specific to GoToMyPC)