# Firewall Config for Online Activation Service

**URL:** <https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261>\
**Category:** Ignition\
**Created:** [March 12, 2019, 8:28pm UTC](https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261 "2019-03-12T20:28:41Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![paul.bouillon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul.bouillon/32/7980_2.png) [@paul.bouillon](https://forum.inductiveautomation.com/u/paul.bouillon)\
**Post date:** [March 12, 2019, 8:28pm UTC](https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261/1 "2019-03-12T20:28:41Z")

</div>

Hello,

Was wondering if you might be able to provide details for configuring our firewall/ACLs to allow for usage of the online activation service?

Thanks in advance!

-Paul

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [March 12, 2019, 8:59pm UTC](https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261/2 "2019-03-12T20:59:51Z")

</div>

Allow HTTPS traffic to `api.inductiveautomation.com`.

---

<div class="post-metadata">

**Author:** ![paul.bouillon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul.bouillon/32/7980_2.png) [@paul.bouillon](https://forum.inductiveautomation.com/u/paul.bouillon)\
**Post date:** [March 12, 2019, 9:36pm UTC](https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261/3 "2019-03-12T21:36:33Z")

</div>

> [@Kevin.Herron](#):
>
> [api.inductiveautomation.com](http://api.inductiveautomation.com)

Awesome -- thanks Kevin, will give it a try!

---

<div class="post-metadata">

**Author:** ![martinel3746](https://avatars.discourse-cdn.com/v4/letter/m/e0b2c6/32.png) [@martinel3746](https://forum.inductiveautomation.com/u/martinel3746)\
**Post date:** [March 3, 2020, 8:11pm UTC](https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261/4 "2020-03-03T20:11:06Z")

</div>

We’ve added **[api.inductiveautomation.com](http://api.inductiveautomation.com)** to our whitelist but still cannot use online activation.  
Is there something more that needs to be done with proxies or anything?  
We would like to be able to manage licenses via:  
[http://serverName:8088/main/web/config/system.licensing?x](http://serverName:8088/main/web/config/system.licensing?x)  
And from our EAM Controller.

---

<div class="post-metadata">

**Author:** ![zxcslo](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/zxcslo/32/61610_2.png) [@zxcslo](https://forum.inductiveautomation.com/u/zxcslo)\
**Post date:** [November 15, 2023, 12:55pm UTC](https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261/5 "2023-11-15T12:55:51Z")

</div>

Is this valid for Ignition v7.9?

Customers IT is asking which domains should be allowed through the firewall...?  
Because they will move/change the server where our Ignition gateway is running...

---

<div class="post-metadata">

**Author:** ![zxcslo](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/zxcslo/32/61610_2.png) [@zxcslo](https://forum.inductiveautomation.com/u/zxcslo)\
**Post date:** [November 16, 2023, 12:20pm UTC](https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261/6 "2023-11-16T12:20:45Z")

</div>

Customers IT has allowed access to `api.inductiveautomation.com`, but the gateway still says that there is no internet access...

 ![Screenshot_128](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/7/67285e1d57c9f73428d5557b15e54a1c2bebcb24.png)  
but if I go to the URL in the browser I get this:  
 ![Screenshot_129](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/9/69c463654c1022dc8ac983c23dfe3da3b58a110b.png)  
Oh, and this is v7.9.10 Ignition gateway...

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [November 16, 2023, 5:55pm UTC](https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261/7 "2023-11-16T17:55:51Z")

</div>

> [@zxcslo](#):
>
> v7.9.10

Hmmm. I would suspect old SSL is being blocked somewhere.

---

<div class="post-metadata">

**Author:** ![zxcslo](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/zxcslo/32/61610_2.png) [@zxcslo](https://forum.inductiveautomation.com/u/zxcslo)\
**Post date:** [November 17, 2023, 5:31am UTC](https://forum.inductiveautomation.com/t/firewall-config-for-online-activation-service/23261/8 "2023-11-17T05:31:44Z")

</div>

> [@pturmel](#):
>
> I would suspect old SSL is being blocked somewhere.

Wouldn't that prevent this old Internet Explorer also?