Domain Whitelisting

Overview

As a web-based service, internet connectivity to Workplace's web domains is crucial for normal operation on both desktop web and mobile.

Since Workplace is built on the same technology that powers Facebook, any domain restrictions to prevent network access to Facebook will also affect Workplace.

This guide explains how to ensure connectivity to Workplace from your corporate network.

Domains

In order for Workplace to function properly, you should ensure that all traffic to the following domains (including all subdomains) and ports is unblocked and enabled for your company networks:

*.facebook.com 80/443
*.akamaihd.net 80/443
*.fbcdn.net 80/443
*.fb.me 80/443
*.fbsbx.com 80/443

Note: Selective blocking of Facebook domains is not officially supported for Workplace, so these domains are provided as reference only.

IP Ranges

The domains used by Workplace are subject to change, and as such this list should not be considered exhaustive.

If you need more precise control over access to Workplace on a corporate network, you can choose instead to whitelist the IP ranges of Facebook web servers, from which Workplace is served.

Facebook's Autonomous System (AS) number AS32934 can be used to retrieve an accurate and up-to-date list of IP addresses of Facebook web servers. For example:

whois -h whois.radb.net -- '-i origin AS32934' | grep ^route