Network Security Policies

DialoX Platform / Inbox SDK

Introduction

This document outlines the network security policies for HTTPS inbound and outbound traffic for the DialoX platform, operated by Enreach B.V. It includes details on Transport Layer Security (TLS) standards, traffic routing via Google Cloud Load Balancer, and specific IP addresses and ports required for customer firewall configuration.

HTTPS Security Policies

TLS Security Standards

DialoX enforces secure communication using the latest TLS standards to ensure data integrity and confidentiality. The following security measures are implemented:

• TLS Version: TLS 1.2 and TLS 1.3 are enforced, with TLS 1.3 preferred where supported.

• Cipher Suites: Only strong cipher suites are enabled, such as:

  • TLS_AES_256_GCM_SHA384

  • TLS_CHACHA20_POLY1305_SHA256

  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

• HSTS (HTTP Strict Transport Security): Enforced to prevent protocol downgrade attacks.

• OCSP Stapling: Enabled to improve SSL/TLS certificate validation.

Google Cloud Load Balancer Integration

Google Cloud Load Balancer is utilized to manage inbound HTTPS requests securely. It supports automatic certificate renewal, DDoS protection, and global distribution for optimal performance and security.

Inbound and Outbound Traffic Requirements

Customers with strict firewall policies require specific port and protocol configurations for seamless integration with DialoX services. Below is a detailed list of the IP addresses, ports, and protocols used.

Inbound Traffic (From Customers to DialoX)

Destination IP	Domain Names	Ports	Protocol
35.241.27.155	inbox.dialox.ai studio.dialox.ai bsqd.me	443	HTTPS (TLS 1.2/1.3)

Outbound Traffic (From DialoX to Customer Systems)

Source IP	Ports	Protocol
34.91.172.214	443	HTTPS (TLS 1.2/1.3)

Customers should configure their firewalls to allow traffic to and from these IP addresses to ensure seamless communication with DialoX services.

Conclusion

By adhering to the latest security standards and leveraging Google Cloud Load Balancer, Enreach B.V. ensures a secure and robust network architecture for DialoX. Customers with strict firewall policies should whitelist the specified IP addresses and ports to avoid disruptions in service.

Metadata

· Date: February 7, 2025

· Publisher: Arjan Scherpenisse

· Company: Enreach B.V.

· Revision: 1.0