IBM Connections Cloud (Connections Cloud) is a cloud based messaging and collaboration suite of services, located outside of your company's network, on the internet.
You must work with your network team to update your firewall settings according to the table below, in order to allow users in your company to use the IBM Connections Cloud S2 (formerly SmartCloud Engage Standard) applications: Collaboration tools, web Meetings and mobile apps. PDF of this article included in Attachments at bottom.
Table - configure Firewall settings for Connections Cloud S2
Top level domains to allow
File sharing, communities, instant messaging, meetings and mobile apps accessing the service over the internet.
Note: *.akamaiedge.net required for the Akamai accelerated network.
Same as Port 443 above.
Same as Port 443 above.
You can allow connections over TCP/IP port 80 (HTTP). If clients connect over HTTP, they are redirected to HTTPS.
Port 1533/Virtual Places (VP)
community in the service.
Port 990, (60000 - 61000)/
The host name *.lotuslive.com
has been transitioned to *.collabserv.com.
Connections to the service through *.lotuslive.com
are redirected to *.collabserv.com
Add the new domain *.collabserv.com
to your firewall configuration, but keep the lotuslive.com
configuration, if you currently use it.
- IBM Connections Cloud is a multi-tenant service. It uses an acceleration network technology, with over 75,000 edge servers in order to provide high availability to the service for its users worldwide. In order to benefit from the accelerated network, using DNS names is recommended. An IP address range may be used, however, the range will be very large and is subject to change. Contact firstname.lastname@example.org if an IP range must be used.
- If your organization is using an HTTP Proxy, you must allow media traffic from Connections Cloud Meetings to traverse through the HTTP Proxy at the organization level.
Please review: http://www-01.ibm.com/support/docview.wss?uid=swg21960844
If your organization does require IP addresses please ensure you are allowing the supplied ranges for Akamai. These are required for all web (port 80 / 443) traffic. A simple test you can do from within your secured network to confirm you are allowing the Akamai IP ranges is:
1) Ping apps.na.collabserv.com and ensure it resolves to an address that ends with "akamaiedge.net".
Pinging e10012.cd.akamaiedge.net [184.108.40.206] with 32 bytes of data:
Reply from 220.127.116.11: bytes=32 time=153ms TTL=54
Reply from 18.104.22.168: bytes=32 time=23ms TTL=54
Reply from 22.214.171.124: bytes=32 time=50ms TTL=54
Reply from 126.96.36.199: bytes=32 time=75ms TTL=54
2) Log in and view the Connections Cloud dashboard by accessing https://apps.na.collabserv.com
If step #1 verifies you are going through an Akamai Edge server and the dashboard renders properly, then you can access our service through Akamai and should have no issues accessing Notes Web or Verse.
(substitute na.collabserv.com with ap.collabserv.com or ce.collabserv.com for AP or EU data centers respectively)
Additonal Cheat Sheets and Resources:
Cheat Sheet: Firewall settings for IBM Connections Cloud S1 (Connections Cloud S2 + Notes + Document editors)
Cheat Sheet: Firewall settings for IBM Connections Web Mail Cloud