The "Allowlist" Guide

Firewall and proxy allowlist domains and URLs required for We360.ai connectivity.

All We360.ai traffic uses HTTPS or WSS on TCP port 443. No other ports are required. These apply identically to Windows and macOS.

Wildcard rules (strongly recommended):

Domain pattern	Notes
*.we360.ai	Covers all We360.ai services
*.in.we360.ai	India-region endpoints

Individual URL fallback list (use if your firewall does not support wildcards):

URL	Purpose
https://portal.we360.ai	Admin portal; delivers installers and agent updates
https://assets.we360.ai	Configuration bundles
https://assets.v2.we360.ai	Configuration bundles (v2)
https://origin.in.we360.ai	License validation
https://origin.global.we360.ai	License validation
https://api.in.we360.ai	Primary API endpoint: REST (HTTPS) and real-time livestream (WSS), both on port 443
https://auth.in.we360.ai	Issues and refreshes authentication tokens for agent-to-backend communication
https://<base_domain>.we360.ai	Customer admin console (e.g., acme.we360.ai)

2.7 Cloudflare IP allowlist

We360.ai sits behind Cloudflare. Domain-based rules are preferred; the IPs below are provided as a supplementary reference for environments where only IP-based rules are possible.

IP	Notes
104.26.15.125	Cloudflare
104.26.14.125	Cloudflare
172.67.72.141	Cloudflare

These addresses may change through Cloudflare anycast re-routing. To future-proof your rules, allow all Cloudflare proxy ranges. The authoritative and machine-readable lists are maintained at:

• Human-readable: https://www.cloudflare.com/ips/

• IPv4 list: https://www.cloudflare.com/ips-v4

• IPv6 list: https://www.cloudflare.com/ips-v6