Network Whitelisting & Infrastructure

impressBox operates on a modern, cloud-based architecture designed for security and scalability. Our player software utilizes outbound-only communication, meaning the player initiates all connections to our servers.

This design eliminates the need for IT administrators to open inbound ports on local firewalls, significantly reducing the security attack surface of your internal network. To ensure seamless operation, your network firewall must allow outbound traffic to the specific endpoints listed below.

Cloud Infrastructure Locations

We utilize a distributed infrastructure to ensure high availability and low latency. Our primary servers are located in:

• Google Cloud Platform: Warsaw, Poland
• DigitalOcean: Frankfurt, Germany
• Delska Data Centers: Riga, Latvia & Vilnius, Lithuania

Please configure your network firewall to allow outbound TCP traffic to the following destinations.

Provide the table above to your Network Administrator or IT Security team. They should add these IP addresses to the allowlist (whitelist) of your firewall or proxy server.

• Restricted Networks: If you are on a highly restricted guest network or corporate VLAN, devices may fail to register or download content until these rules are applied.
• Software Updates: Blocking access to these IPs may prevent player software from receiving critical security patches and feature updates.
• SSL Inspection: If your network performs SSL inspection (Man-in-the-Middle), you may need to exclude impressBox traffic or install your root CA on the player devices (if supported by the hardware platform).