What Firewall Changes are Needed to Allow ClickDimensions Proper Access to Your Dynamics On-Premise Deployment?

Many corporate firewalls restrict communication with web services by IP addresses and ports through the use of firewalls, proxies, ADFS servers and other security mechanisms. This can cause ClickDimensions and Dynamics to be unable to communicate.

The ClickDimensions application is hosted in Microsoft Azure, a secure, reliable hosted compute platform in Microsoft data centers.

The following information should be helpful to a network administrator in order to make the configurations needed to permit the ClickDimensions service to communicate with Dynamics. ClickDimensions and your Dynamics system require two-way communication.

Data Center

When you register for the ClickDimensions solution, your account will be associated with either the US data center, CAN data center, EU data center, or the AU data center, depending on which you specify during the registration process. You only need to permit access to your Dynamics environment from the IP addresses in your associated data center.

Ports

The ClickDimensions application pages (email template designers, form designers, etc.) are hosted on Azure using HTTPS/SSL (standard port 443) with the exception of the new Form, Survey, Email and Landing page designers, which will require port 19081 to be whitelisted. The ClickDimensions services that need to query Dynamics or sync data to Dynamics can communicate with your Dynamics environment using any port you specify during the registration of your Dynamics environment on our registration page. If your Dynamics environment is configured to be accessed externally via standard or custom ports, just be sure to include the port number in the Dynamics/CRM URL section of the registration page.

Proxies

Networks with proxies that require authentication from the Dynamics server to the internet are not supported and can prevent ClickDimensions plugins from working correctly. This is because the ClickDimensions plugins that will post out to our application URL do not have a way to provide credentials to the proxy service. The outgoing request to our API will not supply proxy authentication credentials and may ultimately fail.  In order to circumvent this issue, you will need to add the above application URLs (first row based on the data center of your account) to the Proxy Bypass List.

Email Server IP addresses

See this article for a complete list of the IP addresses used for sending ClickDimensions email.

For further reading

• Connectivity for the ClickDimensions Solution (ClickDimensions)
• ClickDimensions API (ClickDimensions)