Whitelisting and Redirect Information

The following information is also explained in each section of CAM that needs to have whitelisting performed (such as source system integration, external system configuration, iManage). This page also explains Redirect URL’s that are also throughout the documentation for Azure Stack/AzureAD/AzureProxy.

1 iManage Whitelist URLs
2 Redirect Endpoint URI's
3 Default Sender Emails
4 Data Uploader Whitelisting
5 FAQs
- 5.1 What addresses are correct and what addresses need to be whitelisted?

iManage Whitelist URLs

Whitelist if your tenant is hosted in the following Region. If in an older version of iManage cloud or have issues, you may need to open an iManage support ticket to have iManage confirm your sites are whitelisted from their end.

Region/Zone	Whitelist the IP	Whitelist the IP

Region/Zone	Whitelist the IP	Whitelist the IP
US(prosperoware.io)	18.205.167.41	34.198.68.230
UK(prosperoware.co.uk)	18.130.49.85	3.9.236.119
EU(prosperoware.eu)	52.214.142.149	54.76.178.8
Us West(Oregon)(camuswest.com)	44.234.16.65	52.38.245.112
Apac(Singapore)(camapac.com)	3.0.77.244	52.76.160.89
Australia (Sydney)(pwcamau.com)	13.55.127.223	3.105.163.118
Canada(Central)(pwcamcanada.com)	3.96.104.12	3.96.240.119

Redirect Endpoint URI's

Redirect Endpoint URI's are as follows:

Domain	Region	URI
Staging	US East	https://4cpwp6xw51.execute-api.us-east-1.amazonaws.com/v1/cam/auth/redirect
Production	UK (eu-west-2)	https://5cerfmm2b5.execute-api.eu-west-2.amazonaws.com/v1/cam/auth/redirect
Production	EU (eu-west-1)	https://y20ve77is6.execute-api.eu-west-1.amazonaws.com/v1/cam/auth/redirect
Production	US East	https://90uqmfzsbl.execute-api.us-east-1.amazonaws.com/v1/cam/auth/redirect
Production	APAC (ap-southeast-1)	https://c9efufodx8.execute-api.ap-southeast-1.amazonaws.com/v1/cam/auth/redirect
Production	USWest	https://1aj9ofu8f8.execute-api.us-west-2.amazonaws.com/v1/cam/auth/redirect
Production	Sydney Australia (ap-southeast-2)	https://43b9imoxzb.execute-api.ap-southeast-2.amazonaws.com/v1/cam/auth/redirect
Production	Canada	https://5y7l4fx7x1.execute-api.ca-central-1.amazonaws.com/v1/cam/auth/redirect

If you are using the CAM teams app, then Microsoft Office 365 URIs are required. It allows accessing documents that a user has access to in Teams or all shared documents like Teams/SharePoint/OneNote/OneDrive.
Microsoft Office 365	UK	https://camteamapp.prosperowaredev.co.uk/team/ukprod/web/auth-end.html
Microsoft Office 365	EU	https://camteamapp.prosperowaredev.eu/team/euprod/web/auth-end.html
Microsoft Office 365	US	https://camteamapp.prosperoware.io/team/usprod/web/auth-end.html
Microsoft Office 365	APAC	https://camteamapp.camapac.com/team/apacprod/web/auth-end.html

Default Sender Emails

These emails are the defaults for sending email notifications based on region. Please whitelist these accordingly if you plan to send out CAM emails or want to receive any emails from CAM.

Region	Email Notification Default Email

Region	Email Notification Default Email
US	no-reply@prosperoware.io
UK	no-reply@prosperoware.co.uk
EU	no-reply@prosperoware.eu
Us West(Oregon)	no-reply@camuswest.com
Apac(Singapore)	no-reply@camapac.com
Australia (Sydney)	no-reply@pwcamau.com
Canada(Central)	no-reply@pwcamcanada.com

Data Uploader Whitelisting

Port 443 should be open. CAM and Data Uploader utilize the HTTPS ports for requests. The API manages the requests, and no data is locally accessed or stored. If you’ve changed the default port for HTTPS, use the changed port. Check with your IT team if your firm has changed the port, and if so they need to open that default port on the corresponding HTTPS.
Port 1433 should be open for SQL communication between the on-premises SQL and the API. Check with your IT team if your firm has changed the port, and if so they need to open that default port on the corresponding SQL server.
Whitelist the following URLs (please change based on your tenant and region):
- http://api.prosperoware.io (Change this domain according to your site tenant e.g. .io, .eu)
- http://s3.amazonaws.com
- http://dynamodb.region.amazonaws.com (change the region to your region of your tenant e.g. for us east, this would be http://dynamodb.us-east-1.amazonaws.com/)

FAQs

What addresses are correct and what addresses need to be whitelisted?

The addresses provided in the documentation above are strictly for the API and what is required for CAM to connect to external systems. The Web UI of CAM uses both AWS Cognito for authentication and AWS Cloudfront as a content delivery network. We (Litera) have no control over those addresses and they would need to whitelist the entirety of the AWS IP blocks for those services if the client is looking to lock down traffic. Those IP blocks would include all AWS-hosted products/sites, not just CAM.