IP Addresses Connected to During IP LockDown

MigrationWiz uses a global geo-distributed migration farm which includes thousands of IP addresses. In some cases, however, network administrators may want to restrict access to a pre-determined set of IP addresses for security reasons. As a result, we offer the ability to lock down a MigrationWiz connector to use only a specific set of IPs.

If an IP LockDown is required, we offer the option to bind a connector to one of our U.S. data centers, or a regional Azure Data Center. It is important to understand the impact on the migration:

• Migration data traffic will proceed through one of our U.S. data centers, or a regional Azure Data Center, depending on what has been selected during project setup. 
  

Important

• IP LockDown does not work with BitTitan Autodiscover for Users. To add Users to the project, use either Bulk Add via CSV file or add the Users manually.
• IP LockDown does not work for Microsoft 365 to Microsoft 365 with Coexistence migrations.
• For projects that use Azure Storage, IP lock down will not work for your custom Azure Storage unless Microsoft server IPs are included as well. For more details on Microsoft endpoints, refer to URL & IP address ranges.

There are two steps that need to be followed. These are detailed below:

Set Advanced Options for the project in MigrationWiz

Complete these steps to set the preferred data center and add the support option for IP LockDown:

1. Sign in to MigrationWiz at http://migrationwiz.bittitan.com/
2. Access the project dashboard.
3. Click Edit, and then click Advanced Options.
4. In the Performance section, select the customer's local region under the Preferred BitTitan Data Center drop-down menu.
5. In the Support section, add this support option in the Support Options field: Tags=IpLockDown!
6. Click Save.

Open firewall ports

Open firewall ports to allow MigrationWiz to communicate back to BitTitan servers. All migrations need to have the following ports open. 

• Ports:
  80
  443
• If migrating from Zimbra, ports 7070 and 7071 will also need to be open.

Add the below IP's and the IP's for your region's Datacenter listed below. These are the IPs BitTitan uses for support and other communication and should always be enabled when performing a migration.

Support IPs:

52.183.126.172
52.191.133.150
50.251.230.13
66.195.187.146
40.65.119.127
40.65.127.67
101.100.176.129
50.203.126.142
52.151.0.32
52.156.70.193
52.191.137.80
13.66.255.144
20.69.94.245
20.3.88.3

Next, find the data center that is closest to the customer, and open the firewall ports to allow access to the list of IP addresses in that data center (not all data centers have multiple IP addresses). Access is only required for the IPs in your region. For example, if you're in Asia Pacific, you do not need to allow access for the Australian IPs.