Skip to main content Skip to complementary content

Allowlisting domains and IP addresses

To ensure Qlik Cloud works correctly, you may need to allowlist certain domains and IP addresses in your firewall or proxy. This allows Qlik Cloud services, automations, connectors, and sessions to communicate reliably with your systems.

Traffic from Qlik Cloud to your systems may include:

  • Connecting to your databases or other data sources

  • Accessing SMTP servers

  • Sending webhooks

Traffic from your systems to Qlik Cloud may include:

  • Making API calls

  • Using multi-cloud features

  • Starting Qlik Cloud sessions

You may also need to allowlist external domains to access resources such as fonts, help pages, or integrations.

Qlik Cloud Government noteFor Qlik Cloud Government IP addresses, contact Qlik Support.

Allowlisting traffic from Qlik Cloud

The following tables list the regional static IP addresses that Qlik Cloud services use to communicate with customer systems. IPs are specific to each tenant region.

Add the IPs for your region to your firewall or proxy allowlist to ensure reliable connectivity. You can identify your region from your tenant URL: <tenantname>.<region>.qlikcloud.com

Information noteDetailed information about these IP addresses is not available.

Generally required static IP addresses

These static IP addresses are used by Qlik Cloud services to communicate with customer systems. Add the IPs for your region to your firewall or proxy allowlist. You may also need to add these IPs to your tenant-level allowlist to allow inbound connections to your Qlik Cloud tenant.

Static IP addresses required for Qlik Automate

These static IP addresses are used by Qlik Automate to communicate with your systems. Add the IPs for your region to your firewall or proxy allowlist. You may also need to add these IPs to your tenant-level allowlist to allow inbound connections to your Qlik Cloud tenant.

Static IP addresses required for SaaS connectors in Data Integration

These IP addresses are used by Qlik Cloud SaaS connectors to communicate with your tenant. Add the IPs for your region to your firewall or proxy allowlist. Tenant-level allowlisting is not required for SaaS connectors.

Allowlisting traffic from your systems to Qlik Cloud

The table below lists the regional static IP addresses required for API calls, multi-cloud features, and Qlik Cloud sessions. IPs are specific to each tenant region.

Add the IPs for your region to your firewall or proxy allowlist to ensure reliable connectivity. You can identify your region from your tenant URL: <tenantname>.<region>.qlikcloud.com

Traffic may pass through a load balancer and use dynamic source IPs. To prevent blocked connections, allow Qlik Cloud static IPs for your region as destination addresses.

Static IP addresses required for traffic to Qlik Cloud

Tenant-level allowlisting

Tenant-level allowlisting is configured within your Qlik Cloud tenant. It controls which external services or IP addresses can directly access your tenant. This is different from allowlisting in your network firewall or proxy, which controls traffic between your systems and Qlik Cloud.

If you use Qlik Automate, toolkits, gateways, or other external services, review the next section.

For step-by-step instructions on configuring allowlists, see Managing IP allowlists.

Services that require allowlisting

The following table shows which Qlik Cloud services and capabilities require tenant-level allowlisting, along with the specific requirements for each.

Information noteIn case of a disaster recovery (DR) event, Qlik Cloud IP addresses will change. Update the tenant-level allowlist for any tenants using Qlik connector packages in the affected region. New IP addresses will be published by Qlik.

Domain allowlisting

Some Qlik Cloud resources are hosted on external domains and CDNs. Allowlisting these domains ensures full functionality, including fonts, help pages, and integrations.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!