The PolicyPak Cloud client communication is always encrypted end to end. PolicyPak cloud will try on port 443 or 80 as necessary. If you need to configure your Proxy Server to allow communication to specific hosts, you need to set the following:
 

1. cloud-agent.policypak.com via HTTPS/443
2. cloud-events.policypak.com via HTTPS/443
3. ppdl.blob.core.windows.net via HTTPS/443
4. cloudsvc.policypak.com via HTTPS/443 AND OR HTTP/80

The reason why it is OR, and not AND, is.. again, PolicyPak will try HTTPS / 443 first, and fall back to encrypted HTTP over port 80 second.

Currently, the two possible IP addresses for Cloudsvc.policypak.com are:

• 52.168.151.132/32
• 20.185.181.70/32

Cloudsvc.policypak.com will flop-flop between these two IP addresses every release (every 1-2 months).