Which IPs/Domains should I whitelist to seamlessly use Degreed services

Description: 

I generally receive reports from various users who are facing issues accessing Degreed. Are there any specific IPs/Domains that we need to whitelist? 

Answer:

You can use the link Azure IP Ranges and Service Tags – Public Cloud, where you can download the list of IPs and service tags that Microsoft uses and requires for Degreed access. You can whitelist them for Degreed.

Also, below is a more comprehensive list of CDN domains and IP addresses to add to the allow list.

• 20.225.0.69
• 20.225.0.107
• 20.225.0.189
• 20.225.1.0
• 20.225.1.6
• 20.225.1.10
• 13.66.38.99
• 13.66.32.249
• 13.66.35.170
• 13.66.36.236
• 13.66.38.99
• 20.118.69.23
• 20.118.99.142
• 20.225.0.107
• 20.225.0.189
• 20.225.0.69
• 20.225.1.0
• 20.225.1.10
• 20.225.1.28
• 20.225.1.30
• 20.225.1.33
• 20.225.1.38
• 20.225.1.40
• 20.225.1.6
• 40.124.44.122
• 52.171.63.58
• 70.37.50.96
• 70.37.55.197

Server Type	URLs
Web Servers	degreed.com
Degreed Content Delivery Network	*.degreedcdn.com
Degreed Icons	current: s3.amazonaws.com/icomoon.ico Effective April 23,2021:  https://d1azc1qln24ryf.cloudfront.net/
Content Image Rendering	img.degreed.com

With the October 22, 2024 Major Release, we are adding new CDN domain names/URLs to improve the overall speed and performance of Degreed.

To ensure optimal performance of the Degreed applications (inclusive of Academies and Content Marketplace), Organizations that require controlled access to Degreed and who currently use, or previously used, an allow list to unblock/accept access must unblock the following URLs BEFORE October 22, 2024.

• Production Environments
  - US Data Center:  http://usprod.degreedcdn.com/    
  - EU Data Center:  http://euprod.degreedcdn.com/ 
  - Canadian Data Center:  http://caprod.degreedcdn.com/ 
• Beta Environments
  - US Data Center:  http://usbeta.degreedcdn.com/
  - EU Data Center:  http://eubeta.degreedcdn.com/

Additional Information: If your Organization requires or uses an allow list to unblock/accept access to Degreed, and these additional URLs are not added to the list, your users may experience decreased performance or may not be able to access Degreed. 

Degreed Outbound IP Addresses for Integrations and Report Delivery

If your organization uses static IP allowlisting to control which source IP addresses can connect to your systems, you must add Degreed’s NAT Gateway IP addresses to your firewall or allowlist policies. This applies to the following scenarios: • Integrations where Degreed connects to your systems to retrieve or deliver data and your systems require approved source IP addresses • Secure File Transfer Protocol (SFTP) or File Transfer Protocol (FTP) report delivery workflows that require approved source IP addresses • Platforms such as Workday or other systems where your organization restricts connectivity through firewall allowlists

You must add the new NAT Gateway IP addresses by October 6, 2026. Existing proxy IP addresses may stop functioning after the migration completes. Failure to update your allowlist rules may interrupt integrations or report delivery workflows. This update only affects customers using static IP allowlisting. If you do not use static IP allowlisting, no action is required.

NAT Gateway IP Addresses by Environment 

Use the IP addresses for your Degreed data center and environment when updating your firewall or allowlist rules.

Environment	IP Addresses to Add to Your Allowlist
US Beta	48.192.193.115
US Production	135.233.243.3 20.245.92.145
EU Beta	20.79.74.81
EU Production	20.52.213.250 20.113.200.26
CA Product	20.200.84.29 20.104.139.45

After You Update Your Allowlist

After your team completes the allowlist update, contact the Degreed Support Team so we can coordinate routing traffic through the new NAT Gateway infrastructure. We recommend partnering with your internal IT or security teams as soon as possible to avoid service disruptions.