UiPath Documentation
robot
latest
false
Robot admin guide

Configuring networking settings

Configure outbound network access for UiPath Robot by granting access to the external services required for package downloads and license checks.

Executing a workflow implies robot operations such as downloading the automation package, checking licenses, or verifying certificates. To do that, the robot needs to connect to several services. For a successful execution, make sure to grant your robot access to the listed services. The last column, If blocked, summarizes what stops working if a given host is denied or blocklisted.

Outbound connections

Hostname

Protocol

Port

Application

Usage

If blocked

cloud.uipath.com

TCP

443

https

To access Automation Cloud Orchestrator.

The robot cannot connect to Orchestrator at all: no sign-in, no heartbeat, and no jobs run. This is a full outage, since every other connection depends on it.

download.uipath.com

TCP

443

https

To download Studio or Robot MSI installers during automatic updates.

Automatic Studio or Robot updates can no longer be downloaded. Robot keeps running the installed version. Connectivity and job execution are unaffected.

activate.uipath.com

TCP

443

https

To access the licensing server, for checking the license status and verifying data in the license folder for stand-alone licenses only.

Stand-alone license activation and license checks fail with a network error when using online activation. Robots licensed through Orchestrator are unaffected.

jptk0*.proinity.net

TCP

443

https

Hardened/offline images with Windows Update or Automatic Root Updates disabled. Environments where the Trusted Root store has been pruned by policy. In those cases, the robot may reach out to validate the CA.

Only relevant on hardened/offline images with a pruned root store: certificate-chain validation can stall or fail. On standard machines, where the roots are already trusted, there is no impact.

*.nuget.org

TCP

443

https

To download the required activity dependencies.

Dependency packages from nuget.org fail to restore, which results in faulted jobs (NU1102: Unable to find package ...). Packages already cached or available via Orchestrator feed still install.

a23-*-*-*.deploy.static.akamaitechnologies.com

TCP

80

http

To verify if the code signing certificate has been revoked.

Can cause operational failures when the robot is running workflows and needs to resolve certificate revocation lists (CRLs) of dependency packages from the web via Akamai CDN.

x1.i.lencr.org

TCP

80

http

To verify whether the Let's Encrypt certificate authority has revoked the code signing certificate.

HTTPS connections to Automation Cloud may stall or time out if the TLS certificate chain for cloud.uipath.com cannot be validated.

*.service.signalr.net

TCP

443

https, wss

To connect to the SignalR channels provided by Orchestrator.

Robot falls back to heartbeat polling, resulting in ~30s (default interval) delay on start-job. Live streaming, remote control, instant dispatching or interrupting jobs from Orchestrator stop working.

*.ingest.sentry.io

TCP

443

https

Required by Assistant, to send application errors to Sentry. This helps tracking and solving the most common problems. Sentry is controlled by the telemetry setting and is disabled when telemetry is disabled. (Refer to Opting Out of Telemetry)

No functional impact. Assistant error and crash telemetry is lost. It is controlled by the telemetry setting and is already off when telemetry is disabled.

dev.azure.com

pkgs.dev.azure.com

*.blob.core.windows.net

TCP

443

https

To enable UiPath Robots to store and retrieve data using Azure storage services.

Blocking *.blob.core.windows.net breaks Orchestrator features: package download or upload, buckets, video recording, suspending or resuming jobs, large job-arguments. When Azure DevOps feeds are blocked, the robot falls back to the Orchestrator feed or local cache.

           

gallery.uipath.com

marketplace.uipath.com

*.pkgs.visualstudio.com

Note: gallery.uipath.com/api/v2 redirects to uipath.pkgs.visualstudio.com

TCP

443

https

To access the Marketplace NuGet feed.

Marketplace or curated packages that exist only on these feeds fail to restore, faulting the jobs that use them. Packages available from the Orchestrator feed, or already cached, are unaffected.

dc.applicationinsights.azure.com

dc.applicationinsights.microsoft.com

dc.services.visualstudio.com

*.in.applicationinsights.azure.com

TCP

443

https

To send telemetry data.

No functional impact. Diagnostic telemetry is lost. Transmission failures are handled in the background and never affect connectivity or job execution.

asstoffalp.z6.web.core.windows.net

TCP 443 https

Required by Assistant, to load components for the Excel add-in.

If blocked, you cannot run automations from within Excel through the add-in. Robot, Assistant and all unattended execution are unaffected.

*.uipath.com

TCP

443

https, wss

Required by the Live streaming feature, to connect the robot and the browser.

Live streaming and remote control of the robot from Orchestrator can no longer connect. Normal job execution is unaffected.

Outbound connections in JSON format

Copy the data in the JSON format and paste it in your network configuration file:

[
    "cloud.uipath.com",
    "download.uipath.com",
    "pkgs.dev.azure.com",
    "activate.uipath.com",
    "jptk0*.proinity.net",
    "*.nuget.org",
    "a23-*-*-*.deploy.static.akamaitechnologies.com",
    "x1.i.lencr.org",
    "*.service.signalr.net",
    "*.ingest.sentry.io",
    "dev.azure.com",
    "pkgs.dev.azure.com",
    "*.blob.core.windows.net",
    "gallery.uipath.com",
    "marketplace.uipath.com",
    "*.pkgs.visualstudio.com",
    "dc.applicationinsights.azure.com",
    "dc.applicationinsights.microsoft.com",
    "dc.services.visualstudio.com",
    "*.in.applicationinsights.azure.com",
    "asstoff1bp.z6.web.core.windows.net",
    "*.uipath.com"
  ]
[
    "cloud.uipath.com",
    "download.uipath.com",
    "pkgs.dev.azure.com",
    "activate.uipath.com",
    "jptk0*.proinity.net",
    "*.nuget.org",
    "a23-*-*-*.deploy.static.akamaitechnologies.com",
    "x1.i.lencr.org",
    "*.service.signalr.net",
    "*.ingest.sentry.io",
    "dev.azure.com",
    "pkgs.dev.azure.com",
    "*.blob.core.windows.net",
    "gallery.uipath.com",
    "marketplace.uipath.com",
    "*.pkgs.visualstudio.com",
    "dc.applicationinsights.azure.com",
    "dc.applicationinsights.microsoft.com",
    "dc.services.visualstudio.com",
    "*.in.applicationinsights.azure.com",
    "asstoff1bp.z6.web.core.windows.net",
    "*.uipath.com"
  ]
  • Outbound connections
  • Outbound connections in JSON format

Was this page helpful?

Connect

Need help? Support

Want to learn? UiPath Academy

Have questions? UiPath Forum

Stay updated