What are the trusted Whatfix domains to whitelist?

If your organization uses a firewall to restrict network access to only specific websites or software, then you need to whitelist the following domains to ensure that your app can communicate with Whatfix and fetch content for your end users to view.

Also, if your organization has a Content Security Policy (CSP) in place to block external code insertions, then it could prevent Whatfix from working on your app.

To prevent this from happening and to resolve CSP violation errors, the following domains must be added as an exception (Whitelisted) as part of the application's CSP headers. For more information, see Content Security Policy Reference.

Domains to Whitelist:

For all users (excluding EU data center users):

• https://whatfix.com/*

• https://cdn.whatfix.com/*

• https://cdn.whatfix.com/org_desktop_release/<ORG_ID>/manifest.json

CSP directives to whitelist:

For EU data center users:

• https://eu.whatfix.com/*

• https://eucdn.whatfix.com/*

• https://eucdn.whatfix.com/org_desktop_release/<ORG_ID>/manifest.json

CSP directives to whitelist for EU Data Centers

When do domains need whitelisting?

Whatfix recommends whitelisting the domains before you start creating content on Whatfix. This way, content authors will not have any issues previewing and testing the content.

IP addresses to Whitelist

To ensure that Whatfix can access your organization's resources for crawling knowledge base content and integrations, you need to whitelist the certain IP addresses. For a list of all the IP addresses you need to whitelist, see IP Ranges.

Processes to whitelist

Allow the nw.exe process in your firewall. For more information on how to whitelist a process in your Windows firewall, see Microsoft's official documentation.

Best Practice

Make sure you have applied the policy to every page. It must include error pages as well.