Medallia IP addresses and hostnames

For Medallia's dedicated colocation data centers, Medallia, Inc. maintains exclusive ownership of every public IP address and hostname in our environment. Medallia customers can be confident that communications with Medallia via these addresses happen in a secure manner that prevents communications from being hijacked or re-routed.

For Medallia's Oracle Cloud-based data centers, Medallia leverages individual IP addresses assigned by OCI to Medallia. Though rare, IP rotations may occur; enroll via Medallia Support to receive change notifications.

Important: Medallia, Inc. occasionally rotates its IP addresses within dedicated /24 network blocks. If your company designates IP addresses that allow access to your systems, follow the industry-standard practice of designating entire blocks to minimize future changes and down-time. For this reason Medallia does not publish the individual IP addresses of specific hosts.

If you depend on IP addresses, check this page quarterly for updates. For more information, see Revision history.

Important: To identify the IP addresses for GovCloud instances, contact Medallia Support to request the information.

This topic was last updated on 8 July 2024.

Reporting

Some Medallia Web reporting reports use third-party services to enhance reporting. To support Medallia Web reporting, companies need to allow access to the hosts as described in Reporting hostnames. Custom reports that include non-Medallia, Inc. content might also need to add company-specific hosts to the Content security policy (CSP) for their instance configuration.

Import and export

For import and export access, allow the IP addresses and hosts listed in the data center your company connects to.

MMFT hostnames

We use Medallia media file transfer (MMFT) hosts across the globe for bulk file storage. MMFT uses the naming convention filestash.{dc}.medallia.{tld} for the endpoints (on port 22 for SFTP and port 443 for S3), where:

  • {dc} is the Medallia data center abbreviation (such as sc4, sea1, fra1, etc.).
  • {tld} is the Medallia top-level domain for your instance (such as com, eu, com.au, etc.).
Note: Medallia for Digital uses the same CIDR netblocks. However, Medallia for Digital also uses third-party Content delivery networks (CDNs) for fast and distributed file resources. When allowing IP addresses for Digital, include the IP addresses for the appropriate CDN provider, one of:
  • Akamai — Akamai has tens of thousands of IP addresses that may change. Contact Akamai for assistance.
  • Fastly — See Accessing Fastly's IP ranges.

Reporting hostnames

Add these servers to company firewall allow-lists for users to access Medallia Web reporting. Always use https as the protocol. Failure to include the necessary host(s) may cause blank report pages and 403 Forbidden errors.

URLs to allow (HTTPs for all)

Purpose

Medallia Alchemy Experience Reporting

Medallia Setup reports

cdn.medallia.comcdn.appsol.medallia.com

Medallia's content delivery networks for serving static assets such as JavaScript, CSS, and images.

 Cancel iconCancel icon
*.kampyle.comMedallia solution for collecting feedback, statistics and metrics on reporting.Cancel icon—

rum-gateway.medallia.com

Medallia solution for collecting performance metrics. Data-center specific.Cancel icon—
col.eum-appdynamics.com Medallia, Inc. solution for monitoring performance.Cancel icon—
static.medallia.com

Anti Cheating Engine (ACE) and other resources

Cancel iconCancel icon

bugreport.medallia.com

Bug reports URL

Cancel iconCancel icon

www.google-analytics.com

Google Analytics (fonts, images, script)

Cancel iconCancel icon

fonts.gstatic.com
fonts.googleapis.com

Google Fonts

— Cancel icon

chart.googleapis.com

Google Charts

— Cancel icon

cdnjs.cloudflare.com

Codemirror and other JS

— Cancel icon

maxcdn.bootstrapcdn.com
netdna.bootstrapcdn.com

Bootstrap JS

— Cancel icon

Survey hostnames

Add these servers to company firewall allow-lists for users to access Survey engine production and sandbox instances. Always use https as the protocol. Failure to include the necessary host(s) may cause blank report pages and 403 Forbidden errors.

Data centerURLs to allow (HTTPs for all)SBX URLs (HTTPs for all)Region
Canada (can) data centersurvey.medallia.casurveysbx.sbx.can.medallia.caAmericas
Phoenix (phx1) data centersurvey7.medallia.comsurvey7sbx.sbx.phx1.medallia.comAmericas
Seattle (sea1) data centersurvey3.medallia.com

​​survey-usw1-2.medallia.com

surveysbx.sbx.sea1.medallia.comAmericas
Santa Clara (us1) data centersurvey.medallia.com

survey-usw1-1.medallia.com

surveysbx.sbx.sc4.medallia.comAmericas
Tokyo (hnd1) data centersurvey8.medallia.comsurvey8sbx.sbx.hnd1.medallia.comAPAC
Incheon (icn1) data centersurvey9.medallia.comsurvey9sbx.sbx.icn1.medallia.comAPAC
Singapore (sin1) data centersurvey4.medallia.comsurvey4sbx.sbx.sin1.medallia.comAPAC
Sydney (syd1) data centersurvey.medallia.com.ausurvey.sbx.syd1.medallia.com.auAPAC
Jeddah (jed1) data centersurvey5.medallia.comsurvey5sbx.sbx.jed1.medallia.comEMEA
Frankfurt (fra1) data centersurvey2.medallia.eusurvey2sbx.sbx.fra1.medallia.euEurope
United Kingdom/Europe (lon) data centersurvey.medallia.eusurveysbx.sbx.lon.medallia.euEurope

Amsterdam (ams2) data center

Abbreviationams2
CIDR blocks

147.75.246.0/24

Canada (can) data center

Abbreviationcan
CIDR blocks

147.75.178.0/24
147.75.179.0/24
147.75.248.0/24

Failover data centeryul1
Description Host
Email domain to production

express.can.medallia.ca

Email domain to sandbox

sbx.can.medallia.ca

SFTP/FTP Pull import to production feed server feed.medallia.ca
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.can.medallia.ca
Import to production SFTPfilestash.can.medallia.ca

Denver (us2) data center

Abbreviationus2 (den)
CIDR blocks

199.102.177.0/24
147.75.252.0/24

Description Host
Email domain to productionexpress.den.medallia.com
Email domain to sandboxsbx.den.medallia.com
SFTP/FTP Pull import to production feed serverfeed2.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.den.medallia.com
Import to production SFTPfilestash.den.medallia.com

Frankfurt (fra1) data center

Abbreviationfra1
CIDR blocks147.75.180.0/24
Failover data centerams2
DescriptionHost
Email domain to productionexpress.fra1.medallia.eu
Email domain to sandboxexpress.sbx.fra1.medallia.eu
SFTP/FTP Pull import to production feed serverfeed2.medallia.eu
SFTP/FTP Pull import to sandbox feed serverfeed2sbx.sbx.fra1.medallia.eu
Import to production SFTPfilestash.fra1.medallia.eu

Jeddah (jed1) data center

Abbreviationjed1
IP addressesNo CIDR blocks available, individual applications only:

  • Web access to Reporting application and Survey engine:

    • 144.24.223.222

  • Exports from or feed pulls (to/from client server) by Reporting application:

    • 193.122.77.224

  • MMFT (Filestash):

    • 207.127.99.145

  • API GW:

    • 144.24.223.222

  • Sandboxes:

    • 158.101.225.130

DescriptionHost
Email domain to productionexpress5.medallia.com
Email domain to sandboxexpress5.sbx.medallia.com
Import to production SFTPfilestash.jed1.medallia.com

Incheon (icn1) data center

Abbreviationicn1
CIDR blocksNo CIDR blocks available, individual applications only:

  • Web access to the Reporting application and Survey engine:

    146.56.139.229/32

  • Exports from or feed pulls (to/from client server) by the Reporting application:

    • 146.56.182.143/32

  • MMFT (Filestash):

    • 129.154.198.109

  • API GW:

    • 146.56.139.229

  • Sandboxes:

    • 193.122.123.209

Description Host
Email domain to productionexpress9.medallia.com
Email domain to sandboxexpress.sbx.icn1.medallia.com
SFTP/FTP Pull import to production feed server —
SFTP/FTP Pull import to sandbox feed server—
Import to production SFTPfilestash.icn1.medallia.com

Montreal (yul1) data center

Abbreviationyul1
CIDR blocks147.75.254.0/24
Description Host
Email domain to productionexpress.yul.medallia.ca
Email domain to sandboxexpress.sbx.yul.medallia.ca
SFTP/FTP Pull import to production feed serverfeed2.medallia.ca
SFTP/FTP Pull import to sandbox feed serverfeed2sbx.sbx.yul1.medallia.ca

Phoenix (phx1) data center

Abbreviationphx1
IP addressesNo CIDR blocks available, individual applications only:

  • Web access to the Reporting application and Survey engine:

    • 129.153.119.44

  • Exports from or feed pulls (to/from client server) by the Reporting application:

    • 152.70.128.196

  • MMFT (Filestash):

    • 129.153.118.154

  • API GW:

    • 129.153.119.44

  • Sandboxes:

    • 129.146.175.57

DescriptionHost
Email domain to productionexpress7.medallia.com
Email domain to sandboxexpress7.sbx.medallia.com
Import to production SFTPfilestash.phx1.medallia.com

Sacramento (smf1) data center

Abbreviationsmf1
CIDR blocks147.75.181.0/24

Santa Clara (us1) data center

Abbreviationus1 (sc4)
CIDR blocks147.75.251.0/24

199.102.178.0/24

Failover data centerden
Description Host
Email domain to productionexpress.medallia.com
Email domain to sandboxsbx.sc4.medallia.com
SFTP/FTP Pull import to production feed serverfeed.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.sc4.medallia.com
Import to production SFTPfilestash.sc4.medallia.com

Seattle (sea1) data center

Abbreviationsea1
CIDR blocks

147.75.243.0/24

Failover data centerden
Description Host
Email domain to productionexpress.sea1.medallia.com
Email domain to sandboxexpress.sbx.sea1.medallia.com
SFTP/FTP Pull import to production feed serverfeed3.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed3sbx.sbx.sea1.medallia.com
Import to production SFTPfilestash.sea1.medallia.com

Singapore (sin1) data center

Abbreviationsin1
CIDR blocks

147.75.176.0/24

Failover data centerAWS Singapore
Description Host
Email domain to productionexpress.sin1.medallia.com
Email domain to sandboxexpress.sbx.sin1.medallia.com
SFTP/FTP Pull import to production feed serverfeed4.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed4sbx.sbx.sin1.medallia.com
Import to production SFTPfilestash.sin1.medallia.com

Sydney (syd1) data center

Abbreviationsyd1
CIDR blocks147.75.247.0/24
Failover data centerAWS Sydney
Description Host
Email domain to productionexpress2.syd1.medallia.com.au
Email domain to sandboxexpress.sbx.syd1.medallia.com.au
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.syd1.medallia.com.au
Import to production SFTPfilestash.syd1.medallia.com.au

Tokyo (hnd1) data center

Abbreviationhnd1
IP addressesNo CIDR blocks available, individual applications only:

  • Web access to the Reporting application and Survey engine:

    • 150.230.210.102

  • Exports from or feed pulls (to/from client server) by the Reporting application:

    • 150.230.98.45

  • MMFT (Filestash):

    • 152.70.111.183

  • API GW:

    • 150.230.210.102

  • Sandboxes:

    • 150.230.192.103

DescriptionHost
Email domain to productionexpress8.medallia.com
Email domain to sandboxexpress8.sbx.medallia.com
Import to production SFTPfilestash.hnd1.medallia.com

United Kingdom/Europe (lon) data center

Abbreviationlon
CIDR blocks

199.102.176.0/24
147.75.249.0/24

Failover data centerams2
Description Host
Email domain to production

express.medallia.eu

Email domain to sandbox

sbx.lon.medallia.eu

SFTP/FTP Pull import to production feed serverfeed.medallia.eu
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.lon.medallia.eu
Import to production SFTPfilestash.lon.medallia.eu

Survey authentication service URLs

The survey authentication service, also known as Survey Authn, is in charge of providing an authentication mechanism for surveys.

Use these URLs as the entity ID when configuring Medallia as identity provider (IdP) for survey authentication. Always use https as the protocol. For information, see Configure Medallia as IdP for survey authentication.

Data centerEnvironmentURL (HTTPs for all)Description
Canada (can) data centerProductionsurvey-authn.medallia.caUsed in production and client sandbox instances.
Denver (us2) data centerProductionsurvey-authn.den.medallia.comUsed in production instances.
Denver (us2) data centerStagingsurvey-authn-staging.den.medallia.comUsed in engineering sandbox instances.
Frankfurt (fra1) data centerProductionsurvey-authn.fra1.medallia.euUsed in production and client sandbox instances.
United Kingdom/Europe (lon) data centerProductionsurvey-authn.medallia.euUsed in production and client sandbox instances.
Santa Clara (us1) data centerProductionsurvey-authn.medallia.comUsed in production and client sandbox instances.
Seattle (sea1) data centerProductionsurvey-authn.sea1.medallia.comUsed in production and client sandbox instances.
Seattle (sea1) data centerStagingsurvey-authn-staging.eng.sea1.medallia.comUsed in engineering sandbox instances.
Sacramento (smf1) data centerProductionsurvey-authn.smf1.medallia.comUsed in production and client sandbox instances.
Sydney (syd1) data centerProductionsurvey-authn.medallia.com.auUsed in production and client sandbox instances.

Revision history

Revisions made to this topic.

Revision dateRevisions
23 July 2024Beginning 22 July 2024, all metrics-proxy.medallia.* hosts have been replaced by rum-gateway.medallia.com.
08 Jul 2024Added Sacramento (smf1) data center.
14 Jun 2024Added survey authentication service URLs.
09 May 2024Added failover data center information for Santa Clara (us1), Seattle (sea1), Frankfurt (fra1), United Kingdom/Europe (lon), Canada (can), Sydney (syd1), and Singapore (sin1) data centers.
01 Feb 2024Added Incheon (icn1) email domain to production and the email domain to sandbox environments.
24 Oct 2023Updated Jeddah (jed1), Incheon (icn1), Phoenix (phx1), and Tokyo (hnd1) data centers' MMFT IP addresses.
20 Oct 2023Added Frankfurt (fra1) SFTP/FTP Pull import to sandbox feed server hostname.
29 Aug 2023Added survey hostnames for Seattle (sea1) and Santa Clara (us1) data centers.
08 Aug 2023Added sandboxes IP addresses for Jeddah (jed1), Incheon (icn1), Phoenix (phx1), and Tokyo (hnd1) data centers. Added note stating some IP addresses for Jeddah are changing on 23 Aug 2023.
29 Jun 2023Updated Web Access to Reporting Application and Survey Engine IP address for Jeddah (jed1), Phoenix (phx1), and Tokyo (hnd1) data centers.
26 Jun 2023Added paragraph for Oracle Cloud-based data centers.
16 Jun 2023Added note for GovCloud instances.
01 Mar 2023Updated Jeddah (jed1), Phoenix (phx1), Tokyo (hnd1), Incheon (icn1) to add Filestash and API gateway IP addresses.
16 Feb 2023Added Incheon (icn1) data center.
06 Dec 2022Consolidated all survey hostnames to this topic.
17 Nov 2022Removed deprecated mft and sftp1 FTP/SFTP servers and all SMTP IP address listings.
20 Sep 2022Removed Germany (ger) data center; added email host names for Frankfurt (fra1), Jeddah (jed1), Phoenix (phx1), Tokyo (hnd1), and Sydney (syd1).
13 Sep 2022Updated Phoenix (phx1) production email host.
01 Aug 2022Added Tokyo (hnd1) data center.
06 Apr 2022Added Frankfurt (fra1) SFTP/FTP Pull import to production feed server hostname.
02 Mar 2022Added Phoenix (phx1) data center.
02 Feb 2022Added Jeddah (jed1) and Frankfurt (fra1) data centers. Updated Canada (can), Denver (us2), Santa Clara (us1), Singapore (sin1), and United Kingdom/Europe (lon) to add server names.
17 Jan 2022Corrected London sandbox feed server hostname.
20 Sep 2021Added 147.75.180.0/24 to Germany (ger) data center.
20 Nov 2020Added Singapore (sin1) data center. Updated Montreal (yul) to add server names.
17 Jul 2020Consolidated all hostnames to this topic, and incorporated inclusive terminology to say "allow list" instead of "whitelist".