If your application is running in a highly-restricted network environment, you might need to allow outbound traffic between your network and the CardPointe servers to to allow your terminals or application to connect to the necessary services.
If your network configuration includes firewall rules to restrict traffic, ensure that you allow outbound (egress) traffic to the following IP address ranges:
The following topics describe the addresses used by each CardPointe Integrated Terminal and CardPointe Gateway resource in greater detail.
As a best practice, all application configurations should only reference the fully-qualified domain name (FQDN) of the CardPointe Integrated Terminal or CardPointe Gateway services, instead of hard-coding IP addresses. This approach mitigates the need for changes when services migrate between data center locations, and preserves backwards compatibility during future updates.
The following table applies to all CardPointe Integrated Terminal users, including those using an integrated CardPointe Integrated Terminal solution as well as merchants using CardPointe Integrated Terminal devices with the CardPointe Virtual Terminal.
Destination Name | Port | Description | Environment | Protocol |
---|---|---|---|---|
bolt.cardpointe.com | 443 | CardPointe Integrated Terminal API Connection | PROD | TCP |
bolt-terminal.cardpointe.com | 443 | CardPointe Integrated Terminal Gateway Connection | PROD | TCP |
bolt-uat.cardpointe.com | 443 | CardPointe Integrated Terminal API Connection | UAT | TCP |
bolt-terminal-uat.cardpointe.com | 443 | CardPointe Integrated Terminal Gateway Connection | UAT | TCP |
tms.cardconnect.com | 443 | Terminal Management Service (TMS) | PROD | TCP |
The following table provides the CardPointe Gateway IP addresses used to access the CardPointe Gateway by an integrated application as well as by a CardPointe Integrated Terminal.
For merchants integrated to the CardPointe Gateway or CardPointe Integrated Terminal solution, your connection is configured for a particular Gateway site (for example, "fts" or "boltgw.). Refer to the exact URL that you were provided by our Integration Delivery Team or your software vendor to ensure that you are allowing the necessary network connections.
In the following table, <sitename> refers to the host parameter of the URL that you connect to (for example, fts.cardconnect.com, or boltgw.cardconnect.com).
Destination Name | Destination Address | Port | Description | Environment | Protocol |
---|---|---|---|---|---|
<sitename>-uat.cardconnect.com |
| 443 | CardPointe Gateway | UAT | TCP |
<sitename>.cardconnect.com |
| 443 | CardPointe Gateway | PROD | TCP |
Most firewalls block or restrict traffic to limit access to only necessary users and services. If you restrict traffic in your environment, you must add the IP address ranges in this guide to your list of trusted IP addresses to allow traffic to and from the required services.
A firewall is a part of a computer or network that is designed to block unauthorized access while permitting outward communication.