Google Drive firewall and proxy settings
In order for users on your network to access Google Drive and Google Docs editors, your firewall rules should connect to the following hosts and ports. Otherwise, users may be blocked or denied access from these services.
For the following hosts, [N] means any single decimal digit and * means any string not containing a period.
- talk.google.com:5222/XMPP (needed only for Backup and Sync or the legacy version, Drive for Mac/PC)
- The IP addresses that various domain names resolve to don't necessarily fall within any given address range.
- Other Google properties may use the IP addresses that Drive uses.
- Techniques that Drive uses to connect to Google servers depend on the browser, browser version, networking conditions, etc.
- Even if you don't currently see activity at the addresses listed above, there could be future activity.
- Drive sync applications support all unauthenticated proxies configured by the operating system.
Drive File Stream proxies
Drive File Stream encrypts all network traffic and validates host certificates to protect against man-in-the-middle (MITM) attacks. If you deploy to a network that uses a decrypting proxy, you may need to start Drive File Stream with this option:
Path to a file containing trusted root and intermediate certificates. Must be in Privacy Enhanced Mail (PEM) format.