What Firewall Changes are Needed to Allow ClickDimensions Proper Access to Your CRM On-Premise Deployment?

Many corporate firewalls restrict communication with web services by IP addresses and ports through the use of firewalls, proxies, ADFS servers and other security mechanisms. This can cause ClickDimensions and CRM to be unable to communicate.

The ClickDimensions application is hosted in Microsoft Azure, a secure, reliable hosted compute platform in Microsoft data centers.

The following information should be helpful to a network administrator in order to make the configurations needed to permit the ClickDimensions service to communicate with Dynamics CRM. ClickDimensions and your CRM system require two-way communication.

Data Center

When you register for the ClickDimensions solution, your account will be associated with either the US data center, CAN data center, EU data center, or the AU data center, depending on which you specify during the registration process. You only need to permit access to your CRM from the IP addresses in your associated data center.

Ports

The ClickDimensions application pages (email template designers, form designers, etc.) are hosted on Azure using HTTPS/SSL (standard port 443) with the exception of the new Survey editor and Landing page editor, this will require port 19081 to be whitelisted. The ClickDimensions services that need to query CRM or sync data to CRM can communicate with your CRM using any port you specify during the registration of your CRM on our registration page. If your CRM is configured to be accessed externally via standard or custom ports, just be sure to include the port number in the CRM URL section of the registration page.

Proxies

Networks with proxies that require authentication from the CRM server to the internet are not supported and can prevent ClickDimensions plugins from working correctly. This is because the ClickDimensions plugins that will post out to our application URL do not have a way to provide credentials to the proxy service. The outgoing request to our API will not supply proxy authentication credentials and may ultimately fail.  In order to circumvent this issue, you will need to add the above application URLs (first row based on the data center of your account) to the Proxy Bypass List.

Email Server IP addresses

See this article for a complete list of the IP addresses used for sending ClickDimensions email.

For further reading

• Connectivity for the ClickDimensions Solution (ClickDimensions)
• ClickDimensions API Endpoint (ClickDimensions)