Allowlisting and LogMeIn Rescue - non-enterprise customers
This document lists the required domains that must be allowlisted for LogMeIn Rescue to function properly. These domains enable core functionality, media traffic, and support services for non-enterprise customers.
Required Domains
- Access the Zscaler Admin Portal.
- Create a URL Category for Rescue domains.
- Bypass SSL inspection for this category.
- Configure firewall rules to allow required ports.
| Domain | Description | Port |
|---|---|---|
| *.turn.console.gotoassist.com | TURN Server for next-gen media | 15000/UDP and/or 443/TCP
Note: If the network doesn't support fallback to 443, UDP 15000 is required.
|
| update-cdn.logmeinrescue.com | Updates and external technician invites | 443/TCP |
| translation.logmeinrescue.com | Translation services | 443/TCP |
| *.logmeinrescue.com | Core functionality for non-enterprise customers | 443/TCP |
| *.logmein-gateway.com | Gateway DNS resolution | DNS lookup only |
| Short URLs: *.logmein123.com, *.support.me, *.rescuemobile.com *.oty.com | PIN request and ad-hoc applet download sites | 443/TCP |
| *.remoteview.logmein.com | Next-gen media traffic | 3489/UDP or 443/TCP |
GoTo Admin Allowlisting Requirements for Billing Admins
The following allowlisting settings are required for Billing Admins only.
| Domain | Purpose | URLs |
|---|---|---|
| *.goto.com | GoTo Products Homepage |
|
| *.getgo.com | Backend Services & APIs |
|
| Category | URLs |
|---|---|
| Authentication & Admin |
|
| Analytics & Monitoring |
|
| User Experience & Feedback |
|
| Communication |
|
| Accessibility |
|
IP Ranges
Use of IP ranges instead of domain names for the firewall configuration is discouraged unless absolutely necessary because our IP ranges and those of our provider networks need to be periodically audited and modified, creating additional maintenance for your network. These changes are necessary to continue to provide the maximum performance for our GoTo products. Maintenance and failover events within our infrastructure may cause you to connect to servers within any of the ranges.
If your firewall includes a content or application data scanning filter, this may cause a block or latency, which would be indicated in the log files for the filter. To address this problem, verify that the domains or IP ranges will not be scanned or filtered by specifying exception domains or IP ranges.
We do not recommend explicit IP allowlisting of GoTo ranges. If URL allowlisting is not feasible, refer to the list of GoTo IP addresses.
- Limitations in case of using IP Ranges
-
The following features won't be able to use in case of using IP based allowlist since these are using dynamic IPs:
- External technician invite: invited external technicians won't be able to reach one-time technician console to download. This applies to networks where the external technicians are located.
- Auto-upgrade of Calling Card and Unattended endpoints won't be able to auto-upgrade. Manual upgrade and redeployment will be required.