We are in the process of migrating to a new IP space. New IP address ranges are highlighted in the following topics. If you have whitelisted traffic to our current IP addresses, you must add the highlighted IP address ranges to your firewall rules to ensure that your environment can communicate with the CardPointe Gateway and Bolt servers.

Bolt P2PE Whitelisting

If you are using a Bolt device in a highly-restricted network environment, you might need to whitelist outbound traffic between your network and CardConnect to ensure that your environment can connect to the CardPointe Gateway and Bolt servers.

If your network configuration includes firewall rules to restrict traffic, ensure that you allow outbound traffic to the following IP address ranges:

  • 198.62.138.0/24
  • 206.201.63.0/24

The following topics describe the addresses used by each CardConnect resource in greater detail.

All application configurations should only reference the fully-qualified domain name (FQDN) of the CardConnect services, instead of hard-coding IP addresses. This will mitigate the need for changes when CardConnect moves services between data center locations.

Bolt P2PE Traffic Routing

The following table applies to all Bolt users, including those using an integrated Bolt solution and merchants using Bolt devices with the CardPointe Virtual Terminal. 

Destination NameDestination AddressDescriptionPortProtocol
bolt.cardpointe.com69.164.93.34
198.62.138.0/24
67.217.245.178
206.201.63.0/24
Bolt REST API
(PROD)
443TCP
bolt-terminal.cardpointe.com69.164.93.24
198.62.138.0/24
67.217.245.167
206.201.63.0/24
Bolt Terminal
(PROD)
443TCP
bolt-uat.cardpointe.com69.164.93.34
198.62.138.0/24
67.217.245.178
206.201.63.0/24
Bolt REST API
(UAT)
6443TCP
bolt-terminal-uat.cardpointe.com69.164.93.24
198.62.138.0/24
67.217.245.167
206.201.63.0/24
Bolt Terminal
(UAT)
6443TCP

CardPointe Gateway IP Addresses (used by Bolt)

The following table provides the CardPointe Gateway IP addresses used by Bolt. 

For merchants integrated to the Bolt solution, your connection is configured for a particular Gateway site for example, "fts" or "boltgw."  Refer to the exact URL that you were provided by CardConnect's Integration Delivery Team or software vendor to ensure that you are whitelisting the correct network information. 

In the following table, <sitename> refers to the host parameter of the URL that you connect to, for example fts.cardconnect.com, or boltgw.cardconnect.com

Destination NameDestination AddressDescriptionPortProtocol
<sitename>.cardconnect.com69.164.93.9
198.62.138.0/24
67.217.245.179
206.201.63.0/24
Gateway
(UAT)
6443TCP
<sitename>.cardconnect.com69.164.93.9
198.62.138.0/24
67.217.245.179
206.201.63.0/24
Gateway
(PROD)
8443TCP
tms.cardconnect.com69.164.93.12
198.62.138.0/24
67.217.245.182
206.201.63.0/24
TMS
(PROD) 
443TCP

CardPointe IP Update

Please be advised we are in the process of migrating our hosted applications and services, including CardPointe and the CardPointe Gateway, to a new IP space. This means if you have configured a network and/or firewall to whitelist our IP addresses in order to connect to our platform, you must update your systems. 

If you do not whitelist our IP addresses to connect to the CardPointe platform, you will not be impacted by this update. 

Let's Review

IP whitelisting is a common practice in which a business provides a trusted IP address to their servers to allow for inbound/outbound communication. In this sense, certain businesses will whitelist the CardPointe or Gateway IP address so their users can access our domains.

Updated CardPointe Portal + Gateway IP Addresses

If you whitelist the CardPointe and/or Gateway IP address, please provide your system administrator (or whomever manages your network connectivity) with the following information:

The below updated IP blocks must be whitelisted for ingress and egress traffic:

DATA CENTERNEW IP BLOCKOLD IP BLOCK
PHL (Philadelphia, PA) 198.62.138.0/24 69.164.93.9
CHI (Chicago, IL)206.201.63.0/24 67.217.245.179

IMPORTANT NOTE: All application and/or firewall configurations should only reference the fully-qualified domain name (FQDN) of the CardConnect services (ex: fts.cardconnect.com, cardpointe.com or copilot.cardconnect.com), versus hard-coding IP addresses. This will mitigate the need to make changes when CardConnect moves services between data center locations.

Frequently Asked Questions

What does whitelisting mean?

IP whitelisting allows you to create lists of trusted IP addresses or IP ranges from which your users can access your domains. IP whitelist is a security feature often used for limiting and controlling access only to trusted users. 

What is a firewall?

A firewall is a part of a computer or network that is designed to block unauthorized access while permitting outward communication

What is ingress and egress traffic?

  • Ingress traffic originates outside of a business' routers and travels to a destination inside of the business' network
    • Example: An ingress email originates outside of a business' computer network, is passed over the internet and then enters the business' network before it's delivered to the recipient
  • Egress traffic begins inside of a business' network and travels through its routers to a destination outside of the network
    • Example: An egress email email travels from a user's computer and passes through a business' network routers before it is delivered to the internet to travel to a final destination

What happens if my network admin doesn't add the new IP blocks?

If you do not whitelist our IP addresses, you will not be impacted by this update.

If you do whitelist our IP addresses, you will experience failed connections to the CardPointe Portal and Gateway if you do not update your system. 

Update Deadlines

Bolt Terminal User Deadline | June 19, 2019 

If you use a Bolt terminal to process transactions and have whitelisted the Bolt server IP addresses, you must whitelist the above new IPs in your firewall before the deadline, or you will experience failed connections to the Bolt server, and your terminal will become unbolted.

CardPointe Portal User Deadline | March 31, 2019

If you use cardpointe.com to manage or process your transactions and have whitelisted the CardPointe.com IP addresses, you must whitelist the above new IPs in your firewall before the deadline, or you will not be able to access CardPointe.

CardPointe Gateway User Deadline | May 29, 2019

If you use the CardPointe Gateway to process transactions and have whitelisted the CardPointe Gateway IP addresses, you must whitelist the above new IPs in your firewall before the deadline or you will experience failed connections to the Gateway.

CardPointe Gateway Testing Periods:

In preparation for these deadlines, we will be conducting intermittent tests in the coming weeks to ensure you have successfully made the IP update, if your business is impacted. See below to view our testing schedule (for the CardPointe Gateway only).

  • April 30, 2019: 10-minute period
  • May 1, 2019: 10-minute period
  • May 7, 2019: 20-minute period
  • May 8, 2019: 20-minute period
  • May 14, 2019: 60-minute period
  • May 15, 2019: 60-minute period
  • May 21, 2019: 60-minute period
  • May 22, 2019: 60-minute period
  • May 29, 2019: PERMANENT DEADLINE

*Testing periods are subject to change.