---
title: "Configuring your firewall"
slug: "configuring-your-firewall"
abstract: "Overview of the Sitecore services that your Content Management and Content Delivery servers must be able to access."
---
# Configuring your firewall

| **Applies to** | Content Management and Content Delivery |
| --- | --- |

You must always keep your Content Management and Content Delivery roles secure behind a firewall, but you must also allow them to contact essential Sitecore services.

Refer to these topics for configuring your firewall:

- [Configure Sitecore Device Detection](https://doc.sitecore.com/xp/en/developers/91/sitecore-experience-manager/configure-sitecore-device-detection.html)
- [Setting up Sitecore IP Geolocation](https://doc.sitecore.com/xp/en/developers/91/sitecore-experience-manager/set-up-sitecore-ip-geolocation.html)
- [Use the EXM Delivery Cloud service](https://doc.sitecore.com/xp/en/developers/exm/91/email-experience-manager/use-the-exm-delivery-cloud-service.html)
- [The Update Center](https://doc.sitecore.com/xp/en/developers/91/platform-administration-and-architecture/the-update-center.html "The Update Center")

If you [create a Support Package](https://kb.sitecore.net/articles/406145), and you want to analyze it with the Sitecore Diagnostics Service, you must open your firewall for `https://diagnostics.cloud.sitecore.net`.

If you do not have enough seat licenses, and you want to temporarily boost the seat limit, you must open your firewall for `http://www.sitecore.net/boost/queryboost.aspx`.