Outbound network requirements for Tosca Cloud

If your environment uses an outbound firewall, Tosca Cloud needs access to specific network addresses to work properly. This topic lists the primary endpoints Tosca Cloud relies on.

In environments with very restrictive outbound rules, you may need to allow additional endpoints. If you run into connectivity issues and need a complete list tailored to your requirements, please contact our support team.

Critical for product functionality

You need to allow the following domains for core operations of Tosca Cloud. Without them, key features and background processes won’t work.

Connection to platform and features

Domain	Domain required by
Domain depends on product version: https://<your tenant name>.my.tricentis.com https://<your tenant name>.my-sap.tricentis.com https://<your tenant name>.my-sap-eea.tricentis.com	Launcher, agents, browser

Domain

Domain required by

Domain depends on product version:

https://<your tenant name>.my.tricentis.com
https://<your tenant name>.my-sap.tricentis.com
https://<your tenant name>.my-sap-eea.tricentis.com

Launcher, agents, browser

Notes:

You also need to allow WebSocket Secure for this domain.

User authentication

Domain	Domain required by
https://<your Okta org name>.okta.com	Launcher, agents, browser
https://*.awsglobalaccelerator.com	Launcher, agents, browser
https://*.oktacdn.com	Browser
https://okta-featureflag-edge.azureedge.net	Browser

Notes:

You can see your Okta org name in the browser when you sign in to Tosca Cloud.

Upload/download of test assets such as test cases, video recordings, or reports

Domain	Domain required by
https://*.blob.core.windows.net	Launcher, agents, browser

Feature flags

Domain	Domain required by
https://clientstream.launchdarkly.com	Launcher, agents, browser
https://app.launchdarkly.com	Launcher, agents, browser
https://clientsdk.launchdarkly.com	Launcher, agents, browser

Download and installation of prerequisites (if they’re not installed yet)

Domain	Domain required by
https://builds.dotnet.microsoft.com/dotnet	Launcher (setup only)
https://dotnetcli.blob.core.windows.net	Launcher (setup only)
https://download.visualstudio.microsoft.com	Launcher (setup only)
https://aka.ms	Launcher (setup only)

Artificial Intelligence (AI) features

These domains support AI-related features and services within Tosca Cloud, enabling intelligent insights and automation.

Vision AI

Domain	Domain required by
https://vision-ai.app.tricentis.com/<your tenant name>	Launcher, agents, browser
https://vision-ai.app.tricentis.com/sap<tenant>	Launcher, agents, browser
https://vision-ai.app.tricentis.com/sap-eea<tenant>	Launcher, agents, browser

Notes:

You also need to allow WebSocket Secure for this domain.

Tricentis AI services APIs

Domain	Domain required by
Domain depends on region: api-eu-west-3.ai.tricentis.com/api/* api-us-east-1.ai.tricentis.com/api/* api-ap-southeast-2.ai.tricentis.com/api/*	Browser

Domain

Domain required by

Domain depends on region:

api-eu-west-3.ai.tricentis.com/api/*
api-us-east-1.ai.tricentis.com/api/*
api-ap-southeast-2.ai.tricentis.com/api/*

Browser

Notes:

The region is where you created your Tosca Cloud tenant. For example, if you created your tenant in Europe, allow api-eu-west-3.ai.tricentis.com/api/*.
You also need to allow WebSocket Secure for this domain.
Tosca Agentic Test Automation services only use HTTPS, WSS, and TCP port 443.

Tosca Agentic Test Automation front-end

Domain	Domain required by
https://tosca-cloud-app.ai.tricentis.com	Browser
https://app.ai.tricentis.com/tosca	Browser
https://api.coralogix.com/*	Browser
https://events.launchdarkly.com/*	Launcher, agents, browser
https://otel.observability.app.launchdarkly.com/*	Launcher, agents, browser
https://pub.observability.app.launchdarkly.com/*	Launcher, agents, browser
https://fullstory.com/*	Browser
https://edge.fullstory.com/*	Browser
https://static.fullstory.com/*	Browser
rs.fullstory.com	Browser

Other

These domains support additional features. They enhance Tosca Cloud but aren’t necessary for core operations.

Web portal features such as product tours, in-product announcements, and feature status (beta labels)

Domain	Domain required by
https://*.aptrinsic.com	Browser
https://fonts.googleapis.com	Browser
https://storage.googleapis.com	Browser
https://fonts.gstatic.com	Browser
https://ik.imagekit.io	Browser
https://www.youtube.com	Browser

Tosca on-prem download

Domain	Domain required by
https://software.tricentis.com	Browser
https://files.tricentis.com	Browser

Access to documentation from inside Tosca Cloud

Domain	Domain required by
https://docs.tricentis.com	Browser

Telemetry

Domain	Domain required by
https://*.applicationinsights.azure.com	Browser