Optimal Firewall Configuration - GoToMeeting

Find an Answer

Search GoToMeeting articles, videos and user guides   Your search term must have 2 or more characters.

Browse Articles

 

Optimal Firewall Configuration

This information covers GetGo, Inc., a subsidiary of LogMeIn, Inc., SaaS products involving our servers as of March 2017.

Note: Also see our Customer Community to subscribe to notifications when firewall information is updated (click Follow to subscribe).

The GetGo SaaS products are configured to work outbound through ports 8200, 80 or 443. In a restricted environment, port 8200 can be set up for outbound connections. Our products do not listen for, nor do they require, any inbound connections. Connections outbound via port 8200 are optimal, although connections through ports 80 and 443 can also be used.

Integrated Voice over IP (VoIP) connections are configured to work outbound through UDP port 8200. Integrated webcam video support is configured through UDP port 1853.

For most firewall or proxy systems, we recommend specifying a whitelist of DNS addresses for GetGo services so outbound connections can be made. The list of GetGo domains currently includes (but is not limited to) the following:

*.assist.com*.gotoassist.com*.logmein.com
* api.filepicker.io*.gotoassist.at*.openvoice.com
*.citrixonline.com*.gotoassist.me*.osdimg.com
*.citrixonlinecdn.com*.gotomeet.at*.podio.com
*.cloudfront.net*.gotomeet.me*.raas.io
*.expertcity.com*.gotomeeting.com*.securevdr.com
*.fastsupport.com*.gotomypc.com*.sf-api.com
*.getgo.com*.gototraining.com*.sf-api.eu
*.getgocdn.com*.gotowebinar.com*.sharefile.com
*.getgoservices.com*.helpme.net*.sharefile.eu
*.getgoservices.net*.hu.tt*.sharefileftp.com
*.go2assist.me*.joingotomeeting.com*.sharefile-webdav.com
*.gofastchat.com*.jointraining.com 
*.goto-rtc.com*.joinwebinar.com 

Important Note: Changes to the firewall configuration are discouraged unless absolutely necessary because our IP ranges and those of our provider networks need to be periodically audited and modified, creating additional maintenance to your network. These changes are necessary to continue to provide the maximum performance for the GetGo SaaS family of applications. Maintenance and failover events may cause you to connect to servers within any of the ranges.

If your firewall includes a content or application data scanning filter, this may cause blocking or latency, which would be indicated in the log files for the filter. To address this problem, verify the below IP ranges will not be scanned or filtered by specifying exception IP ranges that will not be filtered. If your security policy requires you to specify explicit IP ranges, then configure your firewall to limit port 8200 or 80 or 443 destination, UDP ports 8200 and 1853 and IP addresses to only the GetGo ranges and those of our provider networks given below.

Citrix server / Datacenter IP addresses for use in firewall configurations

Equivalent specifications in 3 common formats

Citrix Assigned
Range by Block
Numeric IP
Address Range
Netmask NotationCIDR Notation
Block 1216.115.208.0 - 216.115.223.255216.115.208.0 255.255.240.0216.115.208.0/20
Block 2216.219.112.0 - 216.219.127.255216.219.112.0 255.255.240.0216.219.112.0/20
Block 366.151.158.0 - 66.151.158.25566.151.158.0 255.255.255.066.151.158.0/24
Block 466.151.150.160 - 66.151.150.19166.151.150.160 255.255.255.22466.151.150.160/27
Block 566.151.115.128 - 66.151.115.19166.151.115.128 255.255.255.19266.151.115.128/26
Block 664.74.80.0 - 64.74.80.25564.74.80.0 255.255.255.064.74.80.0/24
Block 7202.173.24.0 - 202.173.31.255202.173.24.0 255.255.248.0202.173.24.0/21
Block 867.217.64.0 - 67.217.95.25567.217.64.0 255.255.224.067.217.64.0/19
Block 978.108.112.0 - 78.108.127.25578.108.112.0 255.255.240.078.108.112.0/20
Block 1068.64.0.0 - 68.64.31.25568.64.0.0 255.255.224.068.64.0.0/19
Block 11206.183.100.0 - 206.183.103.255206.183.100.0 255.255.252.0206.183.100.0/22
Block 12173.199.0.0 - 173.199.63.255173.199.0.0 255.255.192.0173.199.0.0/18
Block 13103.15.16.0 - 103.15.19.255103.15.16.0 255.255.252.0103.15.16.0/22
Block 14180.153.30.0 - 180.153.31.255180.153.30.0 255.255.254.0180.153.30.0/23
Block 1523.239.224.0 - 23.239.255.25523.239.224.0 255.255.224.023.239.224.0/19
Block 16185.36.20.0 - 185.36.23.255185.36.20.0 255.255.252.0185.36.20.0/22

 

IPv6 addresses space

Citrix Assigned
Range by Block
Classless Inter-Domain Routing (CIDR) format  
Block 12620:0:c70::/48  
Block 22a04:6660::/30  

GetGo scales its services into third-party cloud and carrier networks for improved performance. To ensure continuous uptime, LogMeIn also maintains datacenters in the following regions:

  • U.S.: Nevada, Georgia, Virginia
  • Global: Netherlands, Germany, India, China
  • Global Public Cloud (including, but not limited to): California, Oregon, Virginia, Singapore, Australia, Japan
  • Content Delivery Public Cloud (including, but not limited to): California, Washington, Texas, Indiana, Missouri, New Jersey, Brazil, United Kingdom, Amsterdam, Germany, France, Italy Hong Kong, Japan, Singapore

IP ranges for the content delivery network (CDN)

IP ranges for other services (audio, video and screen sharing)