Below you will find all the information needed to set up your firewall to allow Sync to function on your firewall secured network. You will also find how to configure the Sync App to use your network proxy for network communication.

Sync App connections to Sync Service

Web Browser Connections to Sync Portal

Sync App Supported Proxy Configurations

Sync App currently supports the following the proxy configurations so that the traffic initiated from the application will be forwarded to the specified proxy in your network. Sync App doesn't recognize any other configurations.

- The user must make any of the supported configurations with the Administrator privileges.
- When multiple supported configurations have been specified, Sync App takes precedence according to the order of the list below.
- Sync App currently supports proxy configuration on Windows only.

Warning: proxy settings which are set by Windows "Proxy settings -> Manual proxy setup" page are not supported - they are applied to current user only and are not applied to system services.

Regional Sync App and CollabOS connections to Sync Service

Sync supports regional data storage in addition to our global site which stores data in the US. Learn more about Sync regional data storage here. Below we list the required ports and IP addresses for each supported region.

Note: SOCKS proxy (which is different from HTTP proxy) is required for mqtt proxy to work.

Two URLs that need to be proxied with SOCKS proxy, port 8883 needs to also be allowed along with port 443.

• Ports
  • MQTT: 8883
  • HTTPS: 443
    • Port 443 is used when there is no proxy involved. When a proxy is required, the device uses 8883 instead of 443. 
• URL
  • a3fejkt9utwjk2-ats.iot.us-west-2.amazonaws.com
  • raiden.iot.us-west-2.vc.logitech.com

Refer to the example below for the PAC file entry:

if(localHostOrDomainIs(host,“a3fejkt9utwjk2-ats.iot.us-west-2.amazonaws.com”) || 
localHostOrDomainIs(host,“raiden.iot.us-west-2.vc.logitech.com”) {

return “SOCKS <PROXY SERVER HOST>:<PORT>“;
}

Sync Europe

Sync France

Sync Canada

FAQs

Q: Should firewall ports be open unidirectionally or bidirectionally?

A: The Sync App always initiates connections to the internet. No remote services would initiate connection to the app. Only unidirectional (outgoing) should be sufficient

Q: While configuring the firewall, should the source IP address correspond to the VLAN IP address?

A: The IP address of a device running the Sync App is not sensitive or will not impact any functionality. Whether those devices have corresponding VLAN addresses, it can be decided for networking policies.