DocumentationExperience Cloud KCS

AEM as a Cloud Service: Outbound IP changes and IP allow list requirements

Last update: October 7, 2026

This article describes the impact of changing outbound IP addresses on access to Adobe Experience Manager as a Cloud Service and clarifies when updates to IP allow lists are necessary.

Description description

Environment

Adobe Experience Manager as a Cloud Service (all versions)

Issue/Symptoms

  • Connectivity to Adobe Experience Manager as a Cloud Service or Workfront may fail for users whose traffic originates from new, unallowlisted IPs (if allowlisting is enforced).
  • Users may experience intermittent or blocked access.
  • No specific error messages may appear, but there is a risk of loss of access due to IP-based restrictions.

Cause

Connectivity issues can occur if new outbound IP addresses used by your users are not included in your organization’s firewall rules or in Cloud Manager IP Allow Lists (if used). Adobe does not block access based on customer source IPs unless you have configured IP Allow Lists in Cloud Manager.

Resolution resolution

Follow the steps below to resolve the issue:

  1. Review Adobe’s IP allowlisting model. Adobe Experience Manager as a Cloud Service and Workfront do not enforce access controls based on customer user source IPs at the Adobe perimeter. Access is controlled through authentication and domain-level routing, not by allowlisting customer outbound IP ranges on the Adobe side.
  2. Update your organization’s firewall or WAF rules. If your firewall or WAF restricts outbound connections to Adobe endpoints based on source IP, add the new outbound IP ranges to your rules to avoid connectivity issues.
  3. Check Cloud Manager IP Allow Lists. If you use IP Allow Lists in Cloud Manager for your AEM as a Cloud Service program, add the new outbound IP ranges to your allow list to maintain user access. This configuration is managed within the Cloud Manager UI.
  4. If you do not use Cloud Manager IP Allow Lists, no action is required on the Adobe side for AEM as a Cloud Service.
  5. Verify user access to AEM as a Cloud Service and Workfront from the new outbound IP addresses.
recommendation-more-help
experience-cloud-kcs-help-kbarticles