Port traffic: All secure traffic for Blackbaud Hosting Services and Microsoft Azure environments require port 443, governing HTTPS traffic, to be open.

If your organization can apply a Hostname exception: All Blackbaud environments use a process that determines the most expedient path over the internet called Akamai, which uses a dynamic list of IP addresses. This service requires that an exception be made for the hostname rather than a specific IP Address. Below is a list of environment URL's which will need to be made as an exception to the firewall and/or proxy: 
If your organization requires a static IP Address or is located in a Microsoft Azure environment: The following URLs resolve to a single IP Address and should be added as exceptions to your firewall and/or proxy: 

US-East:  https://testlogin2.blackbaudhosting.com
205.139.106.198

US-West:  https://login1a.blackbaudhosting.com
209.67.139.4

Canada:  https://login3a.blackbaudhosting.com
204.92.98.251

Sydney: https://login4.blackbaudhosting.com
61.14.102.77

Europe: https://login01.blackbaud.net/
212.46.135.243

Azure US: nxt.blackbaud.com and cdn.blackbaudcloud.com
s21actx01cns01.nxt.blackbaud.com (
52.179.157.61

Azure Canada: nxt.blackbaud.com and cdn.blackbaudcloud.com
s23actx01cns01.nxt.blackbaud.com
52.233.47.7

Azure Europe: nxt.blackbaud.com and cdn.blackbaudcloud.com
s22actx01cns02.nxt.blackbaud.com
52.174.28.161

Azure Sydney: nxt.blackbaud.com and cdn.blackbaudcloud.com
s24actx01cns01.nxt.blackbaud.com
23.101.219.185


Additional Firewall Exceptions for Blackbaud Sign-in and Single Sign On (SSO):

signin.blackbaud.com: 216.235.206.143

blackbaudinc.auth0.com: 34.216.50.162, 54.187.222.200, 54.148.41.53