Medallia IP addresses and hostnames

Medallia, Inc. maintains exclusive ownership of every public IP address and hostname in our environment. Medallia customers can be confident that communications with Medallia via these addresses happen in a secure manner that prevents communications from being hijacked or re-routed.

Important: Medallia, Inc. occasionally rotates its IP addresses within dedicated /24 network blocks. If your company designates IP addresses that allow access to your systems, Medallia strongly recommends following the industry-standard practice of designating entire blocks to minimize future changes and down-time. For this reason Medallia does not publish the individual IP addresses of specific hosts.

If you depend on IP addresses, Medallia recommends you check this page quarterly for updates. See Revision history at the bottom of this page for details about updates.

This topic was last updated on 17 November 2022.

Reporting

Some Medallia Web reports use third-party services to enhance reporting. To support Medallia Web reporting, companies need to allow access to the hosts described in Reporting hostnames, below. Custom reports that include non-Medallia, Inc. content, might also need to add company-specific hosts to the Content Security Policy (CSP) for their instance configuration.

Import and export

For import and export access, allow the IP addresses and hosts listed in the data center your company connects to.

MMFT hostnames

We use Medallia Media File Transfer (MMFT) hosts across the globe for bulk file storage. MMFT uses the naming convention filestash.{dc}.medallia.{tld} for the endpoints (on port 22 for SFTP and port 443 for S3), where:

  • {dc} is the Medallia data center abbreviation (“sc4”, “sea1”, “fra1”, etc.).

  • {tld} is the Medallia top-level domain (“com”, “eu”, “com.au”, etc.) for your instance.

Note: Medallia for Digital uses the same CIDR netblocks. However, Medallia for Digital also uses third-party content delivery networks (CDNs) for fast and distributed file resources. When allowing IP addresses for Medallia for Digital, include the IP addresses for the appropriate CDN provider, one of:
  • Akamai — Akamai has tens of thousands of IP addresses that can change. Consult with Akamai for assistance.

  • Fastly — See Accessing Fastly's IP ranges

Reporting hostnames

Add these servers to company firewall allow-lists for users to access Medallia Web reporting. Always use https as the protocol. Failure to include the necessary host(s) can cause blank report pages and 403 Forbidden errors.

URLs to allow (HTTPs for all)

Purpose

Medallia Alchemy Experience Reporting

Classic reports

cdn.medallia.com
cdn.appsol.medallia.com

Medallia's content delivery networks for serving static assets such as JavaScript, CSS, and images.

X X
*.kampyle.com Medallia, Inc. solution for collecting feedback, statistics and metrics on Medallia reporting.X

metrics-proxy.medallia.ca
metrics-proxy.medallia.eu
metrics-proxy.medallia.com.au
metrics-proxy.medallia.com

Medallia, Inc. solution for collecting performance metrics. Data-center specific.X
col.eum-appdynamics.com/ Medallia, Inc. solution for monitoring performance.X
static.medallia.com

Anti Cheating Engine (ACE) and other resources

XX

bugreport.medallia.com

Bug reports URL

XX

www.google-analytics.com/

Google Analytics (fonts, images, script)

X X

fonts.gstatic.com/
fonts.googleapis.com/

Google Fonts

X

chart.googleapis.com/

Google Charts

X

cdnjs.cloudflare.com/

Codemirror and other JS

X

maxcdn.bootstrapcdn.com/
netdna.bootstrapcdn.com/

Bootstrap JS

X

Amsterdam data center

Abbreviation
CIDR blocks

147.75.246.0/24

Canada (can) data center

Abbreviationcan
CIDR blocks

147.75.178.0/24
147.75.179.0/24
147.75.248.0/24

Description Host
Email domain to production

express.can.medallia.ca

Email domain to sandbox

sbx.can.medallia.ca

SFTP/FTP Pull import to production feed server feed.medallia.ca
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.can.medallia.ca
Import to production SFTPfilestash.can.medallia.ca

Denver (us2) data center

Abbreviationus2 (den)
CIDR blocks

199.102.177.0/24
147.75.252.0/24

Description Host
Email domain to productionexpress.den.medallia.com
Email domain to sandboxsbx.den.medallia.com
SFTP/FTP Pull import to production feed server feed2.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.den.medallia.com
Import to production SFTPfilestash.den.medallia.com

Frankfurt (fra1) data center

Abbreviationfra1
CIDR blocks147.75.180.0/24
DescriptionHost
Email domain to productionexpress.fra1.medallia.eu
Email domain to sandbox express.sbx.fra1.medallia.eu
SFTP/FTP Pull import to production feed serverfeed2.medallia.eu
Import to production SFTPfilestash.fra1.medallia.eu

Jeddah (jed1) data center

Abbreviationjed1
IP addressesNo CIDR blocks available, individual applications only:
  • Web access to Reporting Application & Survey Engine:

    • 150.230.48.241

DescriptionHost
Email domain to productionexpress5.medallia.com
Email domain to sandbox express5.sbx.medallia.com
Import to production SFTPfilestash.jed1.medallia.com.au

Montreal (yul1) data center

Abbreviationyul1
CIDR blocks147.75.254.0/24
Description Host
Email domain to productionexpress.yul.medallia.ca
Email domain to sandboxexpress.sbx.yul.medallia.ca
SFTP/FTP Pull import to production feed server feed2.medallia.ca
SFTP/FTP Pull import to sandbox feed server feed2sbx.sbx.yul.medallia.ca 

Phoenix (phx1) data center

Abbreviationphx1
IP addressesNo CIDR blocks available, individual applications only:
  • Web Access to Reporting Application & Survey Engine:

    • 132.226.120.26

  • Exports from or feed pulls (to/from client server) by Reporting Application:

    • 152.70.128.196

DescriptionHost
Email domain to production

express7.medallia.com

Email domain to sandboxexpress7.sbx.medallia.com
Import to production SFTPfilestash.phx1.medallia.com

Santa Clara (us1) data center

Abbreviationus1 (sc4)
CIDR blocks147.75.251.0/24

199.102.178.0/24

Description Host
Email domain to production

express.medallia.com

Email domain to sandboxsbx.sc4.medallia.com
SFTP/FTP Pull import to production feed server feed.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.sc4.medallia.com
Import to production SFTPfilestash.sc4.medallia.com

Seattle (sea1) data center

Abbreviationsea1
CIDR blocks

147.75.243.0/24

Description Host
Email domain to production

express.sea1.medallia.com

Email domain to sandbox

express.sbx.sea1.medallia.com

SFTP/FTP Pull import to production feed server feed3.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed3sbx.sbx.sea1.medallia.com
Import to production SFTPfilestash.sea1.medallia.com

Singapore (sin1) data center

Abbreviationsin1
CIDR blocks

147.75.176.0/24

Description Host
Email domain to productionexpress.sin1.medallia.com
Email domain to sandbox

express.sbx.sin1.medallia.com

SFTP/FTP Pull import to production feed server feed4.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed4sbx.sbx.sin1.medallia.com
Import to production SFTPfilestash.sin1.medallia.com

Sydney (syd1) data center

Abbreviationsyd1
CIDR blocks147.75.247.0/24
Description Host
Email domain to productionexpress2.syd1.medallia.com.au
Email domain to sandboxexpress.sbx.syd1.medallia.com.au
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.syd1.medallia.com.au
Import to production SFTPfilestash.syd1.medallia.com.au

Tokyo (hnd1) data center

Abbreviationhnd1
IP addressesNo CIDR blocks available, individual applications only:
  • Web Access to Reporting Application & Survey Engine:

    • 138.3.220.80

  • Exports from or feed pulls (to/from client server) by Reporting Application:

    • 150.230.98.45

DescriptionHost
Email domain to productionexpress8.medallia.com
Email domain to sandboxexpress8.sbx.medallia.com
Import to production SFTPfilestash.hnd1.medallia.com

United Kingdom/Europe (lon) data center

Abbreviationlon
CIDR blocks

199.102.176.0/24
147.75.249.0/24

Description Host
Email domain to production

express.medallia.eu

Email domain to sandbox

sbx.lon.medallia.eu

SFTP/FTP Pull import to production feed server feed.medallia.eu
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.lonmedallia.eu
Import to production SFTPfilestash.lon.medallia.eu

Revision history

Revisions made to this topic.

Revision dateRevisions
17 Nov 2022Removed deprecated mft and sftp1 FTP/SFTP servers and all SMTP IP address listings.
20 Sep 2022Removed Germany (ger) data center; added email host names for Frankfurt, Jeddah, Phoenix, Tokyo, and Sydney.
13 Sep 2022Updated Phoenix production email host.
1 Aug 2022Added Tokyo (hnd1) data center.
6 Apr 2022Added Frankfurt (fra1) SFTP/FTP Pull import to production feed server hostname.
2 Mar 2022Added Phoenix (phx1) data center.
2 Feb 2022Added Jeddah (jed1) and Frankfurt (fra1) data centers. Updated Canada (can), Denver (us2), Santa Clara (us1), Singapore (sin1), and United Kingdom/Europe (lon) to add server names.
17 Jan 2022Corrected London sandbox feed server hostname.
20 Sep 2021Added 147.75.180.0/24 to Germany (ger) data center.
20 Nov 2020Added Singapore (sin1) data center. Updated Montreal (yul) to add server names.
17 July 2020Consolidated all hostnames to this topic, and incorporated inclusive terminology to say "allow" instead of "whitelist".