Back button image

About allowlisting and LogMeIn Pro

If you or your company uses a firewall to restrict network access to only specific websites or software, you will need to allowlist the domain names and IP ranges enlisted here.

We suggest you allow the URLs listed below to ensure that GoTo (formerly LogMeIn) services are able to connect.

Important: For information about SaaS products offered by GetGo, Inc., a subsidiary of GoTo, Inc., visit this page.
  • *.logmein.com, *.logmein.eu - LogMeIn's main site
  • *.accounts.logme.in - Site allowing login to GoTo services
  • *.internap.net - Powers updates to multiple GoTo products
  • *.internapcdn.net - Powers updates to multiple GoTo products
  • *.logmeininc.com-GoTo's corporate website
  • authentication.logmeininc.com - GoTo's sign-in service
Remember: For information about SaaS products offered by GetGo, Inc., a subsidiary of GoTo, Inc., visit this page.
Note: This includes sub-domains for these domains, so it is advisable to use wildcard rules wherever possible when you allowlist or block any GoTo service on your network. The client-to-host connection uses peer-to-peer connections, encrypted within a 256-bit AES tunnel. The services themselves communicate using port 443 (HTTPS/SSL) and port 80, so no additional ports need to be opened within a firewall.
Tip: Advanced users can inspect TLS network traffic, which requires allowlisting all domains listed in this article and a proper CA certificate.

IP Ranges

It is recommended to use wildcard rules whenever possible while allowlisting or blocking any GoTo services on your network as sub-domains of the domains listed above are included. Also, the client-to-host connection uses peer-to-peer connections, encrypted within a 256-bit AES tunnel.

Use of IP ranges instead of domain names for the firewall configuration is discouraged unless absolutely necessary because our IP ranges and those of our provider networks need to be periodically audited and modified, creating additional maintenance for your network. These changes are necessary to continue to provide the maximum performance for our GoTo products. Maintenance and failover events within our infrastructure may cause you to connect to servers within any of the ranges.

If your firewall includes a content or application data scanning filter, this may cause a block or latency, which would be indicated in the log files for the filter. To address this problem, verify that the domains or IP ranges will not be scanned or filtered by specifying exception domains or IP ranges. If your security policy requires you to specify explicit domain or IP ranges, then configure your firewall exceptions for outbound TCP ports 8200, 443, and 80 as well as UDP ports 8200 and 1853 for the GoTo domains or IP ranges. See below for additional GoTo product-specific ranges. This list is also available in JSON format at https://goto-ipblocks.live.gtc.goto.com/.

We do not recommend explicit IP allowlisting of GoTo ranges. However, if URL allowlisting is not feasible, refer to the following list of IP addresses:

Third-party IP Ranges

You must also allowlist ranges for these third-party services:

Email Domains

For email invitations and correspondences from us and the LogMeIn software, we recommend allowing the following email domains through your email's spam and allowlist filters.

  • @goto.com
  • @m.logmein.com
  • @t.logmein.com
Related Articles:
Chatbot Icon