IP Addresses
IP Addresses are the way computers are addressed on the Internet. They come up most often when configuring firewalls or clients.
Files.com Owned IP Range
Files.com owns the IP block 198.72.80.0/20, which includes all addresses from 198.72.80.0 through 198.72.95.255.
Files.com-assigned application addresses come from this range. Web and API transfers can also connect directly to the storage URLs listed in the hostname reference. Bring Your Own IP supports sites using their own address range.
Reference these IPs when applying firewall or network filtering rules on your side.
Outbound Connections from Files.com
Connections Files.com initiates from its own address range include Webhooks, SMTP email delivery, LDAP connections, Sync, and Remote Mount operations. BYOIP sites can instead use their own addresses. A connection routed through an Agent reaches the remote service from the Agent's network.
If your site uses dedicated IP addresses, Remote Servers, webhook notifications, Event Channel Webhook targets, AS2 trading partners, and Custom SMTP can be configured to use dedicated addresses for outbound traffic. Direct SIEM log streaming uses the site's default dedicated addresses automatically when available. LDAP connections use the general IP pool. The outbound dedicated-IP guidance explains the routing choices and which dedicated addresses each feature uses.
For connections with a routing choice, we recommend leaving outbound connections on the shared pool unless a specific counterparty requires fixed source IPs for firewall reasons.
Files.com does not respond to ICMP (ping/traceroute). Test reachability using a TCP connection to one of the ports used by Files.com instead.
Allowlisting the Owned Range
Our customers and their counterparties often question the size of the Files.com IP address block (which contains 4,096 addresses) when configuring firewall allow-lists, often expressing a preference for a single IP address.
This concern is misguided. Files.com is the largest cloud-based MFT vendor in the world, and we operate with a high degree of security.
Files.com owns and exclusively operates the entire 198.72.80.0/20 IP block. All infrastructure in this range is production infrastructure managed by Files.com. No third-party systems or services exist within this range, and all traffic is Files.com platform traffic.
From a security perspective, allowing a subset of this range instead of the full range provides no meaningful risk reduction. Attempts to reduce the allow-list are unnecessary.
Allow-list the full range for reliable operation.
Why We Require a Large Range
The Files.com platform operates across multiple global regions, each with multiple availability zones. We allocate portions of this IP range across those regions and zones to support high availability, load distribution, and failover during maintenance or outages. This requires having a large range with thousands of IP addresses.
Many of our customers have shared this document directly with internal security teams, network administrators, or external partners and vendors. It provides the necessary context to approve the firewall configuration.
Workaround: Custom Domains
Adding a custom domain to your site gives you two dedicated IP addresses, which works around the large allow-list. We do not recommend adding a custom domain solely for this purpose.
Connections through a Custom Domain use the domain's region, which can add distance for users in other regions. Review routing and acceleration before choosing dedicated addresses solely for an allowlist.