Subject: PKR tech
From: Subir Chakma <[email-masked]>
To: Jitendra Sharma <[email-masked]>
Date: Fri, 22 Apr 2016 14:36:02 +0530 (IST)

Configuring your Firewall to Work with LivePerson Services 
Description 

In the tables below, the flags refer to accounts in different geographic locations. 
If you are not sure what geographic location applies to your account, please contact our support team. 

    * Settings for LivePerson Chat Services 
    * Settings for LivePerson Secure Form App 
    * Settings for LivePerson Telephony and Voice Services 
    * Settings for LivePerson Email and Ticketing Services 

NOTE: 

To enable successful download and ongoing updates of the Browser-Launched Agent Console, 
enable communication with the address https://agent.liveperson.net . 

Our platform works with the certificate providers: VeriSign, thawte, Comodo, GeoTrust, and CyberTrust. 
Please make sure that the Certificate Revocation Lists (CRL) and the Online Certificate Status Protocols (OCSP) 
of the following providers are allowed by your firewall and other hardware/software protection: 

    * http://crl.verisign.com 
    * http://crl.thawte.com 
    * http://crl.comodoca.com 
    * http://crl.geotrust.com 
    * http://crl.omniroot.com 
    * http://ocsp.verisign.com 
    * http://ocsp.thawte.com 
    * http://ocsp.comodoca.com 
    * http://ocsp.usertrust.com 
    * http://ocsp.geotrust.com 

Settings for LivePerson Chat Services 

The Agent console communicates with Liveperson’s servers via ports 80 and 443. Your firewall and other hardware/software protection should be configured to allow outbound traffic from your network to LivePerson servers on these ports. No other ports are needed for chat services. 

Below is a detailed list of server domains and the IP ranges associated with them. These IP ranges should be white-listed in your firewall settings to allow communication with LivePerson. Domain Name 	IP Range 	CIDR Block 
server.lon.liveperson.net 	178.249.96.0 - 178.249.103.255 	178.249.96.0/21 
server.sy.liveperson.net 	

43.251.40.0 – 43.251.43.255 
103.42.132.0 – 103.42.135.255 	43.251.40.0/22 
103.42.132.0/22 
server.iad.liveperson.net 
sales.liveperson.net 
service.liveperson.net 	

162.252.72.0 - 162.252.75.255 
162.252.76.0 - 162.252.79.255 

199.187.116.0 - 199.187.119.255 
208.89.12.0 - 208.89.15.255 	162.252.72.0/22 
162.252.76.0/22 

199.187.116.0/22 
208.89.12.0/22 
Settings for LivePerson Secure Form App 

The Secure App Form (PCI-DSS) is a Geo-Located solution. Visitors and Agents will usually get serviced from the nearest LivePerson Farm. 

Your firewall and other hardware/software protection should be configured to allow outbound traffic from your network to LivePerson servers for TCP port 443. 	Domain Name 	IP Range 

Accounts located in 
the UK, APAC and elsewhere 
	tokenizer.liveperson.net 	

208.89.12.116 

199.187.116.116 

178.249.97.92 Settings for LivePerson Telephony and Voice Services 

Your firewall and other hardware/software protection should be configured to allow outbound traffic from your network to LivePerson using UDP high ports (1024-65535). No other ports are needed for the telephony services. 

The exact domain name and IP address varies depending on your account type. Below is a detailed list of server domains and the IP ranges associated with them. These should be white-listed in your firewall settings 
to allow communication with the LivePerson servers. 	Domain Name 	IP Range 	CIDR Block 

Accounts located in 
the UK, APAC and elsewhere 	

sbcsmb.liveperson.net 
sbcent.liveperson.net 

sbcuk.liveperson.net 	199.187.116.200 - 199.187.116.201 	199.187.116.200/31 
199.187.116.247 - 199.187.116.250 	199.187.116.247/32 
199.187.116.248/31 
199.187.116.250/32 
208.89.12.200 - 208.89.12.201 	208.89.12.200/31 
208.89.12.247 - 208.89.12.250 	208.89.12.247/32 
208.89.12.248/31 
208.89.12.250/32 

178.249.97.33 and 178.249.97.49 - 178.249.97.50 

178.349.101.33 and 178.249.101.49 

(UK) 	

178.249.97.33/32 

178.349.97.49/32 

178.249.97.50/32 

178.249.101.33/32 

178.249.101.49/32 

NOTE: 

    * The configurations above involve no security hazard whatsoever as you are allowing only outbound communications and only to our specific servers. You should apply all ranges to your firewall settings. 
    * For best voice quality and performance, we recommend that you enable QoS on your router for voice packets . 

Settings for LivePerson Email and Ticketing Services 

Your firewall and other hardware/software protection should be configured to allow inbound traffic from LivePerson to your network using TCP ports 20-22, 25, 80, 110, 443 and 995. No other ports are needed by the email/ticketing services. 	Domain Name 	IP Range 	CIDR Block 

Accounts located in 
the UK, APAC and elsewhere 	

mails.liveperson.net mails01.liveperson.net 
mails02.liveperson.net mails03.liveperson.net 
mails04.liveperson.net mails05.liveperson.net (Small-Medium Business) 

maile.liveperson.net maile01.liveperson.net maile02.liveperson.net maile03.liveperson.net maile04.liveperson.net (Enterprise) 

mailu.liveperson.net (UK) 

maila.liveperson.net (EU) 	208.89.13.209, 
208.89.13.233 - 208.89.13.237 	199.187.117.209 
208.89.13.233/32 
208.89.13.234/31 
208.89.13.236/31 
208.89.14.201 - 208.89.14.204 	208.89.14.201/32 
208.89.14.202/31 
208.89.14.204/32 
208.89.14.209 	208.89.14.209/32 
199.187.118.209 	199.187.118.209/32 
199.187.118.201 - 199.187.118.204 	199.187.118.201/32 
199.187.118.202/31 
199.187.118.204/32 
199.187.117.233 - 199.187.117.237 	199.187.117.233/32 
199.187.117.234/31 
199.187.117.236/31 

178.249.98.17 - 178.249.98-21(UK) 

178.249.102.17 - 178.249.102.21 	

178.249.98.16/29 

178.249.202.16/29 

NOTE: You must disable any requirement for login session timeouts or periodic re-authentication. 

Product and Version 

Core only Additional resources 

For information on browser and operating system requirements for working with LivePerson services, click here . Keywords 

firewall settings IP service email voice chat range proxy ticketing white-list telephony 

Regards