Resources
Policies & Procedures
General Security Policy
REQ_12-1
Information Security Systems Maintenance Policy
Databank SOC2 Type 2
Colocation facility
Acceptable Use Policy
REQ_12-3-5
3rd Party Integration Vendor Contacts
Acceptable Use Standard
REQ_7-1-1_and_7-1-3
Incident Reporting Policy
REQ_12-1_and_11-2
Access Control and Logging and Monitoring Standard
REQ_10-6_and_10-7_and_10-4-2-A_and_8-1-A
Access Control and Monitoring Policy
Background Check Policy
REQ_12
FAQs
Subprocessors
Travelport
GDS Tools
SAP Concur
Online Bookings
Umbrella
Traveler Profiles
Magnatech
Unused Tickets
Monitoring
Compliance
ISO 27018
NIST Cybersecurity
PCI
GDPR
SOC 2 Type 2
Network
IPs and Domains for Whitelisting
To ensure optimal performance and uninterrupted access to our services, it is critical that you whitelist the following IP addresses and domain names in your firewall or security appliances. Whitelisting our trusted network resources will prevent any issues related to email filtering, network connectivity, or application performance.
Our IPs and domains are essential for maintaining secure communication between your infrastructure and our services. Below, you will find the technical details for the required IPs and domains, categorized by service.
Datacenter IP Range:
BlockIPv4: 192.41.84.194/26Range
IPv4: 192.41.84.194 - 192.41.84.254Additional IPs
IPv4: 172.181.50.33Staging:IPv4: 4.236.57.132
Specific IPs for External Services:
SendGrid (Email Delivery):
159.183.139.139
Domains for Whitelisting
To ensure uninterrupted communication with our servers and services, whitelist the following domains at the DNS level:
- cbtravel.com
- cbtat.com
- andavo.com
- goct.com
- christophersontravel.com
Ports and Protocols
For proper communication, please ensure the following ports are open:
- HTTP: Port 80 (TCP)
- HTTPS: Port 443 (TCP)
- SMTP (Email): Port 25, 587 (for unencrypted/TLS connections), 465 (for SSL connections)
Security Recommendations
We recommend updating your firewall configurations to allow outbound traffic to these IPs and domains. Additionally, ensure that any Intrusion Detection Systems (IDS) or Intrusion Prevention Systems (IPS) are configured to trust our traffic to avoid any false-positive alerts that might block legitimate communications.
For customers using email filtering solutions, make sure the IP addresses for our email services, such as those related to SendGrid, are added to your email security provider’s safelist. This will ensure the timely delivery of critical communication.