Medallia IP addresses and hostnames
For Medallia's dedicated colocation data centers, Medallia, Inc. maintains exclusive ownership of every public IP address and hostname in our environment. Medallia customers can be confident that communications with Medallia via these addresses happen in a secure manner that prevents communications from being hijacked or re-routed.
For Medallia's Oracle Cloud-based data centers, Medallia leverages individual IP addresses assigned by OCI to Medallia. Though rare, IP rotations may occur; enroll via Medallia Support to receive change notifications.
If you depend on IP addresses, check this page quarterly for updates. For more information, see Revision history.
This topic was last updated on 8 July 2024.
Reporting
Some Medallia Web reporting reports use third-party services to enhance reporting. To support Medallia Web reporting, companies need to allow access to the hosts as described in Reporting hostnames. Custom reports that include non-Medallia, Inc. content might also need to add company-specific hosts to the Content security policy (CSP) for their instance configuration.
Import and export
For import and export access, allow the IP addresses and hosts listed in the data center your company connects to.
MMFT hostnames
We use Medallia media file transfer (MMFT) hosts across the globe for bulk file storage. MMFT uses the naming convention filestash.{dc}.medallia.{tld}
for the endpoints (on port 22 for SFTP and port 443 for S3), where:
{dc}
is the Medallia data center abbreviation (such as sc4, sea1, fra1, etc.).{tld}
is the Medallia top-level domain for your instance (such as com, eu, com.au, etc.).
- Akamai — Akamai has tens of thousands of IP addresses that may change. Contact Akamai for assistance.
- Fastly — See Accessing Fastly's IP ranges.
Reporting hostnames
Add these servers to company firewall allow-lists for users to access Medallia Web reporting. Always use https
as the protocol. Failure to include the necessary host(s) may cause blank report pages and 403 Forbidden errors.
URLs to allow (HTTPs for all) | Purpose | Medallia Alchemy Experience Reporting | Medallia Setup reports |
---|---|---|---|
| Medallia's content delivery networks for serving static assets such as JavaScript, CSS, and images. | ||
*.kampyle.com | Medallia solution for collecting feedback, statistics and metrics on reporting. | — | |
| Medallia solution for collecting performance metrics. Data-center specific. | — | |
col.eum-appdynamics.com | Medallia, Inc. solution for monitoring performance. | — | |
static.medallia.com | Anti Cheating Engine (ACE) and other resources | ||
| Bug reports URL | ||
| Google Analytics (fonts, images, script) | ||
| Google Fonts | — | |
| Google Charts | — | |
| Codemirror and other JS | — | |
| Bootstrap JS | — |
Survey hostnames
Add these servers to company firewall allow-lists for users to access Survey engine production and sandbox instances. Always use https
as the protocol. Failure to include the necessary host(s) may cause blank report pages and 403 Forbidden errors.
Data center | URLs to allow (HTTPs for all) | SBX URLs (HTTPs for all) | Region |
---|---|---|---|
Canada (can) data center | survey.medallia.ca | surveysbx.sbx.can.medallia.ca | Americas |
Phoenix (phx1) data center | survey7.medallia.com | survey7sbx.sbx.phx1.medallia.com | Americas |
Seattle (sea1) data center | survey3.medallia.com
| surveysbx.sbx.sea1.medallia.com | Americas |
Santa Clara (us1) data center | survey.medallia.com
| surveysbx.sbx.sc4.medallia.com | Americas |
Tokyo (hnd1) data center | survey8.medallia.com | survey8sbx.sbx.hnd1.medallia.com | APAC |
Incheon (icn1) data center | survey9.medallia.com | survey9sbx.sbx.icn1.medallia.com | APAC |
Singapore (sin1) data center | survey4.medallia.com | survey4sbx.sbx.sin1.medallia.com | APAC |
Sydney (syd1) data center | survey.medallia.com.au | survey.sbx.syd1.medallia.com.au | APAC |
Jeddah (jed1) data center | survey5.medallia.com | survey5sbx.sbx.jed1.medallia.com | EMEA |
Frankfurt (fra1) data center | survey2.medallia.eu | survey2sbx.sbx.fra1.medallia.eu | Europe |
United Kingdom/Europe (lon) data center | survey.medallia.eu | surveysbx.sbx.lon.medallia.eu | Europe |
Amsterdam (ams2) data center
Abbreviation | ams2 |
CIDR blocks | 147.75.246.0/24 |
Canada (can) data center
Abbreviation | can |
CIDR blocks | 147.75.178.0/24 |
Failover data center | yul1 |
Description | Host |
---|---|
Email domain to production |
|
Email domain to sandbox |
|
SFTP/FTP Pull import to production feed server | feed.medallia.ca |
SFTP/FTP Pull import to sandbox feed server | feedsbx.sbx.can.medallia.ca |
Import to production SFTP | filestash.can.medallia.ca |
Denver (us2) data center
Abbreviation | us2 (den) |
CIDR blocks | 199.102.177.0/24 |
Description | Host |
---|---|
Email domain to production | express.den.medallia.com |
Email domain to sandbox | sbx.den.medallia.com |
SFTP/FTP Pull import to production feed server | feed2.medallia.com |
SFTP/FTP Pull import to sandbox feed server | feedsbx.sbx.den.medallia.com |
Import to production SFTP | filestash.den.medallia.com |
Frankfurt (fra1) data center
Abbreviation | fra1 |
CIDR blocks | 147.75.180.0/24 |
Failover data center | ams2 |
Description | Host |
---|---|
Email domain to production | express.fra1.medallia.eu |
Email domain to sandbox | express.sbx.fra1.medallia.eu |
SFTP/FTP Pull import to production feed server | feed2.medallia.eu |
SFTP/FTP Pull import to sandbox feed server | feed2sbx.sbx.fra1.medallia.eu |
Import to production SFTP | filestash.fra1.medallia.eu |
Jeddah (jed1) data center
Abbreviation | jed1 |
IP addresses | No CIDR blocks available, individual applications only:
|
Description | Host |
---|---|
Email domain to production | express5.medallia.com |
Email domain to sandbox | express5.sbx.medallia.com |
Import to production SFTP | filestash.jed1.medallia.com |
Incheon (icn1) data center
Abbreviation | icn1 |
CIDR blocks | No CIDR blocks available, individual applications only:
|
Description | Host |
---|---|
Email domain to production | express9.medallia.com |
Email domain to sandbox | express.sbx.icn1.medallia.com |
SFTP/FTP Pull import to production feed server | — |
SFTP/FTP Pull import to sandbox feed server | — |
Import to production SFTP | filestash.icn1.medallia.com |
Montreal (yul1) data center
Abbreviation | yul1 |
CIDR blocks | 147.75.254.0/24 |
Description | Host |
---|---|
Email domain to production | express.yul.medallia.ca |
Email domain to sandbox | express.sbx.yul.medallia.ca |
SFTP/FTP Pull import to production feed server | feed2.medallia.ca |
SFTP/FTP Pull import to sandbox feed server | feed2sbx.sbx.yul1.medallia.ca |
Phoenix (phx1) data center
Abbreviation | phx1 |
IP addresses | No CIDR blocks available, individual applications only:
|
Description | Host |
---|---|
Email domain to production | express7.medallia.com |
Email domain to sandbox | express7.sbx.medallia.com |
Import to production SFTP | filestash.phx1.medallia.com |
Sacramento (smf1) data center
Abbreviation | smf1 |
CIDR blocks | 147.75.181.0/24 |
Santa Clara (us1) data center
Abbreviation | us1 (sc4) |
CIDR blocks | 147.75.251.0/24 199.102.178.0/24 |
Failover data center | den |
Description | Host |
---|---|
Email domain to production | express.medallia.com |
Email domain to sandbox | sbx.sc4.medallia.com |
SFTP/FTP Pull import to production feed server | feed.medallia.com |
SFTP/FTP Pull import to sandbox feed server | feedsbx.sbx.sc4.medallia.com |
Import to production SFTP | filestash.sc4.medallia.com |
Seattle (sea1) data center
Abbreviation | sea1 |
CIDR blocks | 147.75.243.0/24 |
Failover data center | den |
Description | Host |
---|---|
Email domain to production | express.sea1.medallia.com |
Email domain to sandbox | express.sbx.sea1.medallia.com |
SFTP/FTP Pull import to production feed server | feed3.medallia.com |
SFTP/FTP Pull import to sandbox feed server | feed3sbx.sbx.sea1.medallia.com |
Import to production SFTP | filestash.sea1.medallia.com |
Singapore (sin1) data center
Abbreviation | sin1 |
CIDR blocks | 147.75.176.0/24 |
Failover data center | AWS Singapore |
Description | Host |
---|---|
Email domain to production | express.sin1.medallia.com |
Email domain to sandbox | express.sbx.sin1.medallia.com |
SFTP/FTP Pull import to production feed server | feed4.medallia.com |
SFTP/FTP Pull import to sandbox feed server | feed4sbx.sbx.sin1.medallia.com |
Import to production SFTP | filestash.sin1.medallia.com |
Sydney (syd1) data center
Abbreviation | syd1 |
CIDR blocks | 147.75.247.0/24 |
Failover data center | AWS Sydney |
Description | Host |
---|---|
Email domain to production | express2.syd1.medallia.com.au |
Email domain to sandbox | express.sbx.syd1.medallia.com.au |
SFTP/FTP Pull import to sandbox feed server | feedsbx.sbx.syd1.medallia.com.au |
Import to production SFTP | filestash.syd1.medallia.com.au |
Tokyo (hnd1) data center
Abbreviation | hnd1 |
IP addresses | No CIDR blocks available, individual applications only:
|
Description | Host |
---|---|
Email domain to production | express8.medallia.com |
Email domain to sandbox | express8.sbx.medallia.com |
Import to production SFTP | filestash.hnd1.medallia.com |
United Kingdom/Europe (lon) data center
Abbreviation | lon |
CIDR blocks | 199.102.176.0/24 |
Failover data center | ams2 |
Description | Host |
---|---|
Email domain to production |
|
Email domain to sandbox |
|
SFTP/FTP Pull import to production feed server | feed.medallia.eu |
SFTP/FTP Pull import to sandbox feed server | feedsbx.sbx.lon.medallia.eu |
Import to production SFTP | filestash.lon.medallia.eu |
Survey authentication service URLs
The survey authentication service, also known as Survey Authn, is in charge of providing an authentication mechanism for surveys.
Use these URLs as the entity ID when configuring Medallia as identity provider (IdP) for survey authentication. Always use https
as the protocol. For information, see Configuring Medallia as IdP for survey authentication.
Data center | Environment | URL (HTTPs for all) | Description |
---|---|---|---|
Canada (can) data center | Production | survey-authn.medallia.ca | Used in production and client sandbox instances. |
Denver (us2) data center | Production | survey-authn.den.medallia.com | Used in production instances. |
Denver (us2) data center | Staging | survey-authn-staging.den.medallia.com | Used in engineering sandbox instances. |
Frankfurt (fra1) data center | Production | survey-authn.fra1.medallia.eu | Used in production and client sandbox instances. |
United Kingdom/Europe (lon) data center | Production | survey-authn.medallia.eu | Used in production and client sandbox instances. |
Santa Clara (us1) data center | Production | survey-authn.medallia.com | Used in production and client sandbox instances. |
Seattle (sea1) data center | Production | survey-authn.sea1.medallia.com | Used in production and client sandbox instances. |
Seattle (sea1) data center | Staging | survey-authn-staging.eng.sea1.medallia.com | Used in engineering sandbox instances. |
Sacramento (smf1) data center | Production | survey-authn.smf1.medallia.com | Used in production and client sandbox instances. |
Sydney (syd1) data center | Production | survey-authn.medallia.com.au | Used in production and client sandbox instances. |
Revision history
Revisions made to this topic.
Revision date | Revisions |
---|---|
23 July 2024 | Beginning 22 July 2024, all metrics-proxy.medallia.* hosts have been replaced by rum-gateway.medallia.com . |
08 Jul 2024 | Added Sacramento (smf1) data center. |
14 Jun 2024 | Added survey authentication service URLs. |
09 May 2024 | Added failover data center information for Santa Clara (us1), Seattle (sea1), Frankfurt (fra1), United Kingdom/Europe (lon), Canada (can), Sydney (syd1), and Singapore (sin1) data centers. |
01 Feb 2024 | Added Incheon (icn1) email domain to production and the email domain to sandbox environments. |
24 Oct 2023 | Updated Jeddah (jed1), Incheon (icn1), Phoenix (phx1), and Tokyo (hnd1) data centers' MMFT IP addresses. |
20 Oct 2023 | Added Frankfurt (fra1) SFTP/FTP Pull import to sandbox feed server hostname. |
29 Aug 2023 | Added survey hostnames for Seattle (sea1) and Santa Clara (us1) data centers. |
08 Aug 2023 | Added sandboxes IP addresses for Jeddah (jed1), Incheon (icn1), Phoenix (phx1), and Tokyo (hnd1) data centers. Added note stating some IP addresses for Jeddah are changing on 23 Aug 2023. |
29 Jun 2023 | Updated Web Access to Reporting Application and Survey Engine IP address for Jeddah (jed1), Phoenix (phx1), and Tokyo (hnd1) data centers. |
26 Jun 2023 | Added paragraph for Oracle Cloud-based data centers. |
16 Jun 2023 | Added note for GovCloud instances. |
01 Mar 2023 | Updated Jeddah (jed1), Phoenix (phx1), Tokyo (hnd1), Incheon (icn1) to add Filestash and API gateway IP addresses. |
16 Feb 2023 | Added Incheon (icn1) data center. |
06 Dec 2022 | Consolidated all survey hostnames to this topic. |
17 Nov 2022 | Removed deprecated mft and sftp1 FTP/SFTP servers and all SMTP IP address listings. |
20 Sep 2022 | Removed Germany (ger) data center; added email host names for Frankfurt (fra1), Jeddah (jed1), Phoenix (phx1), Tokyo (hnd1), and Sydney (syd1). |
13 Sep 2022 | Updated Phoenix (phx1) production email host. |
01 Aug 2022 | Added Tokyo (hnd1) data center. |
06 Apr 2022 | Added Frankfurt (fra1) SFTP/FTP Pull import to production feed server hostname. |
02 Mar 2022 | Added Phoenix (phx1) data center. |
02 Feb 2022 | Added Jeddah (jed1) and Frankfurt (fra1) data centers. Updated Canada (can), Denver (us2), Santa Clara (us1), Singapore (sin1), and United Kingdom/Europe (lon) to add server names. |
17 Jan 2022 | Corrected London sandbox feed server hostname. |
20 Sep 2021 | Added 147.75.180.0/24 to Germany (ger) data center. |
20 Nov 2020 | Added Singapore (sin1) data center. Updated Montreal (yul) to add server names. |
17 Jul 2020 | Consolidated all hostnames to this topic, and incorporated inclusive terminology to say "allow list" instead of "whitelist". |