> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gc.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Whitelisting Requirements

> Network configuration requirements for GC AI products.

To ensure full functionality of GC AI products (Web App and Word Add-in), your network firewall or proxy must allow outbound connections to the following domains and ports.

## Quick Summary

* **Ports:** 443 (HTTPS & WSS)
* **Protocols:** TLS 1.2+, Secure WebSockets (WSS)
* **Method:** Whitelist by **Domain Name** (DNS) is required due to dynamic IP usage by our cloud providers.

## Required Domains

### Application Core

These domains are essential for the application to load and function.

| Domain          | Purpose              |
| --------------- | -------------------- |
| `app.gc.ai`     | Main Web Application |
| `word.getgc.ai` | Word Add-in Frontend |

### File Storage & Processing

Required for uploading documents and viewing processed files.

| Domain                   | Purpose                                                  |
| ------------------------ | -------------------------------------------------------- |
| `storage.googleapis.com` | Secure file uploads and downloads (Google Cloud Storage) |

## WebSocket Requirements

The GC AI Word Add-in requires **Secure WebSockets (WSS)** over port **443** to communicate in real time with our AI engine. Please ensure your network allows outbound **WSS** traffic to the following domains:

* `app.gc.ai`
* `word.getgc.ai`

## Troubleshooting

If you encounter specific error messages, they may indicate that certain domains are blocked.

| Error Message / Symptom                                                        | Probable Cause                          | Resolution                                  |
| ------------------------------------------------------------------------------ | --------------------------------------- | ------------------------------------------- |
| **"There was an error uploading your file"** or **"HTTP error"** during upload | Connection to cloud storage is blocked. | Ensure `storage.googleapis.com` is allowed. |

## Security Software (Zscaler, Netskope, etc.)

Organizations using security platforms like Zscaler or Netskope may need additional configuration beyond domain allowlisting. These platforms can block Microsoft 365 add-in traffic through SSL/TLS inspection, URL filtering, or cloud app control policies.

**Zscaler users:** Zscaler offers a [Microsoft One Click Configuration](https://help.zscaler.com/zia/about-microsoft-one-click-options) that automatically exempts Microsoft 365 traffic from SSL/TLS inspection and configures the necessary firewall, DNS, and cloud app control rules. Enabling this is the fastest way to resolve add-in connectivity issues in Zscaler environments.

For detailed troubleshooting steps, including domain allowlisting by security platform, SSL/TLS inspection bypass, and proxy configuration, see the [GC AI for Word Troubleshooting Guide](/docs/gc-ai-for-word/troubleshooting-guide#security-software-blocking).

## Additional Resources

For a comprehensive list of Microsoft 365 endpoints that may also need to be reachable from your network, refer to the official Microsoft documentation:

* [Microsoft 365 URLs and IP Address Ranges](https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide)