This article outlines the IP addresses that the Secure Remote Support uses.
All new or existing Secure Remote Services installations must add all hostnames and IP addresses listed below.
Note: This article was created for ESRS and SRSv3. Secure Connect Gateway 5 required hostnames, and ports are also in SCG documents like SCG 5 Support Matrix and SCG5 Users Guide.
Note: The SCG requirements are similar to those mentioned in this article, but also require port 8443 to esrs3-core.emc.com and esrs3-coredr.emc.com (This article has been updated to reflect this.)
All Secure Remote Services users are migrated to the new Secure Remote Services infrastructure on a date to be decided in preparation for the retirement of the existing infrastructure. All hosts and IP addresses should be configured regardless of GEO, as Outbound Only.
List of required IP addresses, ports, and hostnames
ESRS UI, port 443:
Production:
esrs3.emc.com 128.221.236.245
DR:
esrs3-dr.emc.com 168.159.224.235
ESRS Core (for GW Pings) port 443 and 8443:
Production:
esrs3-core.emc.com 128.221.236.246
DR:
esrs3-coredr.emc.com 168.159.224.236
Global Access Servers (GAS) ports 443 and 8443:
All GAS servers must be usable to allow for traffic efficiency and full redundancy.
esr3gduprd01.emc.com 128.221.204.207
esr3gduprd02.emc.com 128.221.204.208
esr3gduprd03.emc.com 128.221.204.209
esr3gduprd04.emc.com 128.221.204.212
esr3gduprd05.emc.com 128.221.204.214
esr3gduprd06.emc.com 128.221.204.215
esr3ghoprd01.emc.com 168.159.209.91
esr3ghoprd02.emc.com 168.159.209.92
esr3ghoprd03.emc.com 168.159.209.93
esr3ghoprd04.emc.com 168.159.209.94
esr3ghoprd05.emc.com 168.159.209.95
esr3ghoprd06.emc.com 168.159.209.96
esr3gscprd01.emc.com 137.69.120.227
esr3gscprd02.emc.com 137.69.120.222
esr3gscprd03.emc.com 137.69.120.223
esr3gscprd04.emc.com 137.69.120.224
esr3gscprd05.emc.com 137.69.120.225
esr3gscprd06.emc.com 137.69.120.226
esr3gckprd01.emc.com 152.62.177.21
esr3gckprd02.emc.com 152.62.177.22
esr3gckprd03.emc.com 152.62.177.23
esr3gckprd04.emc.com 152.62.177.24
esr3gckprd05.emc.com 152.62.177.25
esr3gckprd06.emc.com 152.62.177.26
esr3gckprd07.emc.com 152.62.177.27
esr3gckprd08.emc.com 152.62.177.28
esr3gckprd09.emc.com 152.62.177.29
esr3gckprd10.emc.com 152.62.177.30
esr3gckprd11.emc.com 152.62.177.31
esr3gckprd12.emc.com 152.62.177.32
esr3gspprd01.emc.com 152.62.45.21
esr3gspprd02.emc.com 152.62.45.22
esr3gspprd03.emc.com 152.62.45.23
esr3gspprd04.emc.com 152.62.45.24
esr3gspprd05.emc.com 152.62.45.25
esr3gspprd06.emc.com 152.62.45.26
Other requirements
- Traffic must be permitted on ports 443 and 8443 for https traffic for the Global Access Servers (GAS) Servers.
Failure to open port 8443 for the GAS servers results in significant performance impact (30 - 45 %) and may result in a delay in resolving the issue with the end device.
- NO SSL checking, Certificate verification, or Certificate Proxying is permitted.
- In addition, Secure Remote Services V3 (VE or DE) requires access to the below hosts for alternate connectivity method FTPS:
- You MUST permit traffic to Dell Online Support (https://www.dell.com/support/home/) and (pf-ng.us.dell.com) on port 443
- Users MUST have a support account that is registered for the site at which the device or Secure Remote Services Device client is located.
The latest Customer Environment Check Tool (CECT) is available for download from the Dell Support pages.
Note: We are unable to supply a specific IP address or range of addresses as the IP address depends the location (Geo) of the DNS server resolving the EMC Online Support host to use. If the user MUST supply an IP address, they should use nslookup locally and use that IP address. It may be found that there is more than one IP address as DNSs may be doing a "Round Robin." If this is found, the user should configure this IP address in their firewall to permit failover. If using the hosts file on the ESRS IP Client (Gateway for Device), you can only use one IP address for EMC Online Support. This does create a minor exposure if the specific host referenced in the hosts file authentication to EMC Online Support may fail.
Search Dell Technologies for the most recent "Secure Remote Services Port Requirements" Guide