Does anyone know where I might be able to find the IP address ranges for Marketing Cloud login and administration pages?
Our corporate VPN is split-tunnel, meaning not all traffic is routed through it. I need to get the marketing cloud traffic routing through it so that I have a predictable IP address to meet the new whitelisting requirements.
On login, I'm seeing
mc.exacttarget.com, mc.login.exacttarget.com, verify.salesforce.com and mc.s12.exacttarget.com(and I'm assuming that last one changes depending on region).
Thanks for any help!
#Salesforce Admin #Security
Salesforce publishes these in the Help article 'IP Addresses for Inclusion on Allowlists in Marketing Cloud Engagement' — the ranges are instance-specific and Salesforce changes them periodically, so pull the set for your instance and re-check it quarterly. On what you're seeing: the 's12' in
mc.s12.exacttarget.com is your Marketing Cloud stack (your provisioned instance) — it's fixed for your tenant, not region-varying, so the IPs you actually need are the ones mapped to that stack. Because those app/login IPs can shift, if your split-tunnel VPN supports FQDN/domain-based routing, targeting the *.exacttarget.com and verify.salesforce.com hostnames is far more durable than hardcoding IPs; if it can only match on IP, a quick Salesforce Support case will confirm the current ranges for your stack. if this helps, please mark it as the Best Answer so it helps the next person — thanks 🙂
