Action Required: Update Your Allow-Listed Marketo Engage IP Addresses for Webhooks, CRM Integrations, and More

Marketo Employee
Marketo Employee

Prior to March 22, 2022, the IP addresses used for outbound network traffic originating from the Marketo Engage infrastructure in the Ashburn and San Jose data centers were:

  • San Jose:
  • Ashburn:

To accommodate the increasing network traffic growth rate, we added the following IP CIDR (Classless Inter-Domain Routing) blocks for outbound network traffic originating from Marketo Engage infrastructure to your applications during the maintenance windows listed below. If you had explicitly allowed the IP addresses above to access your applications, we requested that you replace those IP addresses with the new IP CIDR blocks prior to the maintenance window. Please review the information about these applications and how to determine whether your subscription is affected below. Please note, the current IP addresses ( and are included in this CIDR range and do not need to be explicitly included in the allowed list during the transition period. Because SFDC does not use CIDR notations for their allow-lists, we recommend using a tool like This will convert the CIDR notation to an IP range with starting and ending IP addresses. 


Maintenance Window

  • San Jose Data Center: March 22, 2022, 3:00 AM MDT – 4:00 AM MDT
  • Ashburn Data Center: March 23, 2022, 3:00 AM MDT – 4:00 AM MDT

New IP CIDR Range

The IP CIDR range below applies to both the San Jose and Ashburn data centers. The IP addresses above should have been replaced with all three blocks in your allowed list. 


The most common applications that you would have possibly explicitly allowed our IP address due to your IT security requirements are CRM integrations and Webhooks:

CRM Integration: CRM Integration requires Marketo Engage to access CRM API endpoints to retrieve data. Your company may have security requirements to allow only a set of IP addresses to access such endpoints. Please consult your CRM administrator to validate if you have explicitly allowed our current IP address to access CRM API and replace the current IP Address with the new IP CIDR blocks to the allowed list.

Webhooks: A Webhook is an integration feature that allows you to make outbound HTTP calls using GET or POST originating from Marketo Engage to your applications. These applications can either be internal applications or applications built by third-party vendors.

For each webhook listed under Admin->Webhook, please check the URL endpoint and determine the type of application. Consult with your respective IT or application team managing each endpoint to determine whether our current IP address has been explicitly allowed to access such application and replace the current IP Address with the new IP CIDR blocks to the allowed list.