product icon

What should I allow on my firewall for GoToAssist Corporate?

Learn what ports, IP addresses, domains, etc. need to be allowed on your firewall for your service to successfully connect and work with GoTo.

Subscribe to notifications in our Customer Community to be kept up to date on any changes to this important information.

Required Email Domains

  • @goto.com
  • @logmein.com
  • customerservice@s.logmein.com
  • @care.gotoassist.com
  • @m.logmein.com
  • @t.logmein.com

Required Ports

  • Outbound TCP 443
  • Outbound TCP 80
  • STUN/TURN - TCP and UDP 3489 — GoTo Resolve and GoToAssist v5 only

Required Domains

Universal Domains Additional Product Specific Domains
GoToAssist Remote Support v.4 GoToAssist Remote Support v.5 GoToAssist SeeIt GoToAssist Corporate
Required:

*.goto.com

*.getgo.com

*.ingest.sentry.io

*.logmein.com

*.logmeininc.com

Required:

*.gotoassist.com

*.fastsupport.com

*.cloudfront.net

helpme.net

*.expertcity.com

Note: The following domains will be required starting February 19, 2023.

cdn.goto.com

cdn.getgo.com

getgo.com

Required:

*.fastsupport.com

helpme.net

Required:

*.gotoassist.com

*.tokbox.com

static.opentok.com

enterprise.opentok.com

api.opentok.com

anvil.opentok.com

hlg.toxbox.com

Required:

*.gotoassist.com

*.gotoassist.me

*.gotoassist.at

*.gofastchat.com

*.desktopstreaming.com

Note: The following domains will be required starting February 19, 2023.

cdn.goto.com

cdn.getgo.com

getgo.com

Optional:

N/A

Optional:

*.google-analytics.com

*filepicker.io

*wootric.com

Optional:

*.segment.io

*.segment.com

*.amplitude.com

Optional:

N/A

Optional:

N/A

GoTo server / Data Center IP addresses for use in firewall configurations

The following IP ranges may be used by any GoTo product, so they should all be added to your allowlist. See below for additional GoTo product-specific ranges. This list is also available in JSON format at https://goto-ipblocks.live.gtc.goto.com/.

Equivalent specifications in 3 common formats

Assigned Range by Block Numeric IP Address Range Netmask Notation CIDR Notation
Block 1 216.115.208.0 – 216.115.223.255 216.115.208.0 255.255.240.0 216.115.208.0/20
Block 2 216.219.112.0 – 216.219.127.255 216.219.112.0 255.255.240.0 216.219.112.0/20
Block 3 67.217.64.0 – 67.217.95.255 67.217.64.0 255.255.224.0 67.217.64.0/19
Block 4 173.199.0.0 – 173.199.63.255 173.199.0.0 255.255.192.0 173.199.0.0/18
Block 5 206.183.100.0 – 206.183.103.255 206.183.100.0 255.255.252.0 206.183.100.0/22
Block 6 68.64.0.0 – 68.64.31.255 68.64.0.0 255.255.224.0 68.64.0.0/19
Block 7 23.239.224.0 – 23.239.255.255 23.239.224.0 255.255.224.0 23.239.224.0/19
Block 8 158.120.16.0 - 158.120.31.255 158.120.16.0 255.255.240.0 158.120.16.0/20
Block 9 202.173.24.0 – 202.173.31.255 202.173.24.0 255.255.248.0 202.173.24.0/21
Block 10 78.108.112.0 – 78.108.127.255 78.108.112.0 255.255.240.0 78.108.112.0/20
Block 11 185.36.20.0 – 185.36.23.255 185.36.20.0 255.255.252.0 185.36.20.0/22
Block 12 188.66.40.0 – 188.66.47.255 188.66.40.0 255.255.248.0 188.66.40.0/21
Block 13 45.12.196.0 – 45.12.199.255 45.12.196.0 255.255.252.0 45.12.196.0/22
Block 14 162.250.60.0 – 162.250.63.255 162.250.60.0 255.255.252.0 162.250.60.0/22
Block 15 199.36.248.0 – 199.36.251.255 199.36.248.0 255.255.252.0 199.36.248.0/22
Block 16 199.87.120.0 – 199.87.123.255 199.87.120.0 255.255.252.0 199.87.120.0/22
Block 17 103.15.16.0 – 103.15.19.255 103.15.16.0 255.255.252.0 103.15.16.0/22
Block 18 64.74.17.0 – 64.74.17.255 64.74.17.0 255.255.255.0 64.74.17.0/24
Block 19 64.74.18.0 – 64.74.19.255 64.74.18.0 255.255.254.0 64.74.18.0/23
Block 20 64.74.103.0 – 64.74.103.255 64.74.103.0 255.255.255.0 64.74.103.0/24
Block 21 64.94.18.0 – 64.94.18.255 64.94.18.0 255.255.255.0 64.94.18.0/24
Block 22 64.94.46.0 – 64.94.47.255 64.94.46.0 255.255.254.0 64.94.46.0/23
Block 23 64.95.128.0 – 64.95.129.255 64.95.128.0 255.255.254.0 64.95.128.0/23
Block 24 66.150.108.0 – 66.150.108.255 66.150.108.0 255.255.255.0 66.150.108.0/24
Block 25 69.25.20.0 – 69.25.21.255 69.25.20.0 255.255.254.0 69.25.20.0/23
Block 26 69.25.247.0 – 69.25.247.255 69.25.247.0 255.255.255.0 69.25.247.0/24
Block 27 95.172.70.0 – 95.172.70.255 95.172.70.0 255.255.255.0 95.172.70.0/24
Block 28 111.221.57.0 – 111.221.57.255 111.221.57.0 255.255.255.0 111.221.57.0/24

IPv6 addresses space

Assigned by Block Classless Inter-Domain Routing (CIDR) format
Block 1 2606:CB00::/32
Block 2 2a0e:bd00::/29

Additional IP addresses required for using GoToAssist Remote Support v.4

Allow these additional IP addresses if your firewall is configured to allow list by IP range rather than domains:

  • 52.23.109.85
  • 34.194.20.78
  • 54.224.37.110
  • 52.205.68.9
  • 3.221.98.226
  • 54.157.60.139
  • 3.218.246.74
  • 52.55.102.23

Required IP Addresses

Fastpath: This is not for use with GoTo Resolve. If you are using GoTo Resolve, see Fixed IP Addresses below for the relevant TURN server information you need.

It is recommended to use wild card rules whenever possible while allow listing or blocking any GoTo services on your network as sub-domains of the domains listed above are included. Also, the client-to-host connection uses peer-to-peer connections, encrypted within an HTTPS tunnel where data is encrypted with AES-256 symmetric cipher.

Use of IP ranges instead of domain names for the firewall configuration is discouraged unless absolutely necessary because our IP ranges and those of our provider networks need to be periodically audited and modified, creating additional maintenance for your network. These changes are necessary to continue to provide the maximum performance for our products. Maintenance and failover events within our infrastructure may cause you to connect to servers within any of the ranges.

If your firewall includes a content or application data scanning filter, this may cause a block or latency, which would be indicated in the log files for the filter. To address this problem, verify that the domains or IP ranges will not be scanned or filtered by specifying exception domains or IP ranges. If your security policy requires you to specify explicit domain or IP ranges, then configure your firewall exceptions for outbound TCP ports 8200, 443, and 80 as well as UDP ports 8200 and 1853 for the GoTo domains or IP ranges, including those of our third-party provider networks.

Third-party provider IP Ranges

Fixed IP addresses

TURN/STUN Server IP list
ap-southeast-1 Virginia-us-east-1 Oregon-us-west-2 eu-central-1 eu-central-1 (EU-only environment) London (eu-west-2) Mumbai (ap-south-1)

175.41.141.140

54.255.100.96

18.140.137.139

54.255.48.58

54.227.77.39

54.204.126.154

50.17.158.207

3.230.232.226

52.54.244.43

54.146.34.187

54.185.112.207

52.13.255.230

44.232.77.24

44.229.217.227

54.189.249.52

52.35.84.247

3.122.32.27

18.158.218.2

18.158.121.211

52.28.148.85

18.198.174.137

18.198.147.201

18.192.225.252

18.198.176.236

13.42.92.190

18.134.118.217

3.10.62.125

3.11.130.196

3.108.206.123

13.232.7.181

43.205.76.185

65.0.112.174

Data Centers

We scale our services with third-party cloud and carrier networks for improved performance. To ensure continuous up-time, we also maintain data centers in the following regions:

  • U.S.: Nevada, Virginia, Michigan
  • Global: Germany, Australia
  • Global Public Cloud (including, but not limited to): California, Oregon, Virginia, Singapore, Australia, Japan
  • Content Delivery Public Cloud (including, but not limited to): California, Washington, Texas, Indiana, Missouri, New Jersey, Brazil, United Kingdom, Amsterdam, Germany, France, Italy, Hong Kong, Japan, Singapore
Article last updated: 20 September, 2023