If your organization uses a firewall, make sure to set it up so people in your organization can use Gmail. Firewall rules should connect to the supported hosts and routes in this article. Otherwise, people might be blocked from Gmail, or unable to use some Gmail features.
The hosts and routes in this article should be set to allowed in your firewall rules. They should be allowed even if you turn off the corresponding service in your Google Admin console. Gmail uses these hosts and routes to communicate with Google and Google Workspace services.
Keep in mind:
- Even if there's no current activity at these hosts, there might be future activity. IP addresses used by various domain names use don't necessarily fall within any specific range.
- Techniques that Gmail uses to connect to Google servers depend on several factors, for example the browser you're using, and network performance. If your organization uses Gmail add-ons, you should authorize any other hosts.
- Other Google services can use the same IP addresses that Gmail uses.
-
When you use dynamic email and a firewall to connect to hosts not listed below, there might be an impact to Gmail performance.
The asterisk (*) is a wild card, and can be any value except a period.
- *.client-channel.google.com
- accounts.google.com
- apis.google.com
- clients*.google.com
- contacts.google.com
- *.googleusercontent.com
- mail.google.com
- ssl.gstatic.com
- www.google.com
- www.gstatic.com
- ogs.google.com
- play.google.com
