> For clean Markdown content of this page, append .md to this URL. For the complete documentation index, see https://learning.postman.com/llms.txt. For full content including API reference and SDK examples, see https://learning.postman.com/llms-full.txt.

# Use Postman behind a firewall

Postman's infrastructure runs on Amazon's AWS platform. If you're operating behind a network firewall, you'll need to allowlist certain domains. These allowlist requirements also apply to the [Postman CLI](/docs/postman-cli/postman-cli-overview/). There is no fixed IP range to allowlist for Postman. If allowlisting the domains specified in this section is insufficient, refer to the [current AWS IP ranges](https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html) and allowlist the broad range provided.

To enable users to sign in to Postman with a password, allowlist the `challenges.cloudflare.com` domain.

For the [Postman VS Code extension](/docs/reference/vs-code-extension/overview/), allowlist the following domains:

* `wss://bifrost-extension-global.gw.postman.com`
* `https://bifrost-extension-https-global.gw.postman.com`

By default, WebSocket connections use the same ports as HTTP (80) and HTTPS (443). Allowlist the following domains for all versions of Postman to make WebSocket connections:

* `*.getpostman.com`
* `*.postman.co`
* `*.pstmn.io`
* `*.postman.com`

If you're running Postman v10 or later, you must allowlist a further set of domains in addition to the domains listed so far.

For the Postman web app v10 and later to make WebSocket connections, allowlist the following domains:

* `https://bifrost-web-polling-v4.gw.postman.co`
* `https://bifrost-web-premium.gw.postman.co`
* `https://bifrost-web-premium.gw.postman.com`
* `https://bifrost-web-public-v10.gw.postman.com`
* `https://bifrost-web-public-v4.gw.postman.com`
* `https://bifrost-web-v10.gw.postman.co`
* `https://bifrost-web-v10.gw.postman.com`
* `https://bifrost-web-v4.gw.postman.co`
* `https://bifrost-web-v4.gw.postman.com`

For the Postman desktop app v10 and later to make WebSocket connections, allowlist the following domains:

* `https://bifrost-desktop-polling-v4.getpostman.com`
* `https://bifrost-premium-v10-global.gw.postman.com`
* `https://bifrost-premium-v4-global.gw.postman.com`
* `https://bifrost-v10-global.gw.postman.com`
* `https://bifrost-v4-global.gw.postman.com`

For the Postman desktop app v10 and later to make HTTP connections, allowlist the following domains:

* `https://bifrost-https-v10.gw.postman.com`
* `https://bifrost-https-v4.gw.postman.com`
* `https://bifrost-premium-https-v10.gw.postman.com`
* `https://bifrost-premium-https-v4.gw.postman.com`