This section details information about all Celiveo 365 components and protocols/ports used to access services and endpoints for day-to-day and one-time operations.
Celiveo 365 Infrastructure Diagram
Ports and Communications Overview
| Comm ID | Origin | Origin Service Name | Destination | Destination Endpoint | Destination Port | Protocol | Content | Description |
|---|---|---|---|---|---|---|---|---|
| 1 | On-Prem Celiveo 365 Administrator WorkstationOnly active when the admin is adding/configuring cloud print queues and printers/MFPs |
Web Browser (Edge/Chrome) | Public Cloud Celiveo 365 Cloud Services |
https://*.*.celiveo365.com/ | 443 | HTTPS | TLS 1.2 | Used to login to Web Amin and manage solution. |
| 2 | On-Prem Celiveo 365 Administrator WorkstationOnly active when the admin is adding/configuring cloud print queues and printers/MFPs |
Celiveo Browser Agent Service.exe | Public Cloud Azure Cloud Services |
https://*.servicebus.windows.net/ | 443 | HTTPS | TLS 1.2 | Used by Celiveo Admin Browser Agent to get action notifications from Azure like Trigger Sync Process or Delete Printer. |
| 3 | Public Cloud Celiveo 365 Cloud Services |
https://*.*.celiveo.cloud/ | 443 | HTTPS | TLS 1.2 | Upload Printer information, download Printer Agent and configuration | ||
| 15 | https://update.celiveo365.cc/file/celiveoupdates/* | 443 | HTTPS | TLS 1.2 | Used for ABA Auto-Update | |||
| 4 | On-Prem Printer/MFP on the LAN |
n/a | 161 | UDP | SNMP v 1/2/3 | Used by SNMP to retrieve printer information | ||
| 5 | n/a | 9400 / 443 / 9100 | TCP/HTTPS | TLS 1.2 | Used for loading Celiveo Embedded Agent and its configuration | |||
| 6 | On-Prem Celiveo Printer Agent |
n/a | 8181 | TCP | TLS 1.2 | Used to collect the Printer Embedded Agent encrypted logs | ||
| 7 | On-Prem Printer/MFP |
Celiveo Printer Agent running in the printer | Public Cloud Celiveo 365 Cloud Services |
https://*.*.celiveo.cloud/ | 443 | HTTPS | TLS 1.2 | Any communication between Printer Agent and the Celiveo 365 Cloud services. Used for Authentication, Job Delete, and Tracking |
| 8 | Public Cloud Azure Cloud Services |
https://*.blob.core.windows.net/ | 443 | HTTPS | TLS 1.2 | Used by Celiveo Printer Agent to download encrypted Print Jobs from Celiveo 365 | ||
| Section only applicable for customers using printers not supporting the Celiveo embedded agent, Xerox printers or using mobile/NFC print jobs release | ||||||||
| 9 | On-Prem Celiveo UPE service (Universal Printer Endpoint) Provides mobile and NFC print release for older printers. |
Celiveo Universal Printer Endpoint Agent | Public Cloud Azure Cloud Services |
https://*.servicebus.windows.net/ | 443 or 5671/5672 | HTTPS | TLS 1.2 | Used by Celiveo Universal Printer Endpoint Agent to get action notifications from Azure |
| 10 | https://*.blob.core.windows.net/ | 443 | HTTPS | TLS 1.2 | Used by UPE to download encrypted Print Jobs from Celiveo 365 | |||
| 11 | Public Cloud Celiveo 365 Cloud Services |
https://*.*.celiveo.cloud/ | 443 | HTTPS | TLS 1.2 | Used for heartbeat status and Print Job Tracking data | ||
| 15 | https://update.celiveo365.cc/file/celiveoupdates/* | 443 | HTTPS | TLS 1.2 | Used for UPE Auto-Update | |||
| 12 | On-Prem Printer/MFP |
n/a | 443 or 631/80 | HTTPS/IPPS HTTP/IPP | TLS 1.2 when using IPPS/HTTPS | UPE redirects Print Job to target printer via IPPS/HTTPS or in failover to IPP/HTTP (Depends on device configuration) | ||
| 13 | On-Prem / Internet Mobile (iOS, Android) |
Celiveo Print Mobile | Public Cloud Celiveo 365 Cloud Services |
https://*.*.celiveo.cloud/ | 443 | HTTPS | TLS 1.2 | Used for regional placement identification |
| 14 | Used for Print Job submission | |||||||
| Section only applicable for customers using macOS Celiveo Virtual Printer 365 | ||||||||
| 13 | On-Prem macOS Workstation |
Celiveo CVP 365 | Public Cloud Celiveo 365 Cloud Services |
https://*.*.celiveo.cloud/ | 443 | HTTPS | TLS 1.2 | Used for regional placement identification |
| 14 | Used for Print Job submission | |||||||
| Section only applicable for customers using Windows Celiveo Virtual Printer 365 | ||||||||
| 13 | On-Prem Windows Workstation |
Celiveo CVP 365 | Public Cloud Celiveo 365 Cloud Services |
https://*.*.celiveo.cloud/ | 443 | HTTPS | TLS 1.2 | Used for regional placement identification |
| 14 | Used for Print Job submission | |||||||
| 15 | https://update.celiveo365.cc/file/celiveoupdates/* | Used of WinCVP 365 Auto-Update | ||||||
| 15 | https://update.celiveo365.cc/file/cvo-wincvp-artifacts/* | Used for Print Driver & Settings Download | ||||||
Celiveo 365 Regional Endpoints
To identify your subscription region login to https://subscribe.celiveo365.com/ go to Dashboard > Subscription > Region
Celiveo operating regions: EU (France), USA (USA South Central), MX (Mexico), SG (Singapore).
To identify your < tenant name > login to https://subscribe.celiveo365.com/, go to Dashboard > Subscription > Region.
Inside Region there’s a complete Celiveo 365 URL where is the first part of the URL followed by .celiveo365.com eg: https://evolice.celiveo365.com further information regarding the tenant name at step 7 of the subscription process..
| Comm ID | Origin | Full Destination Endpoint |
|---|---|---|
| Endpoints region: EU (France) | ||
| 1 | Web Browser (Admin Workstation VLAN) | https://< tenant name >.eu.celiveo365.com/* |
| 2 | Celiveo Admin Browser Agent (Admin Workstation VLAN) | https://sb-c365-prd-eu.servicebus.windows.net/* |
| 3 | https://< tenant name >.eu-aba6575.celiveo.cloud/* | |
| 3 | https://< tenant name >.eu-gateway6575.celiveo.cloud/* | |
| 15 | https://update.celiveo365.cc/file/celiveoupdates/* | |
| 7 | Celiveo Printer Agent (Printer VLAN) | https://< tenant name >.eu-gateway6575.celiveo.cloud/* |
| 8 | https://cvoblobeuprd.blob.core.windows.net/* | |
| 9 | Celiveo Universal Printer Endpoint Agent | https://sbq-c365-print-prd.servicebus.windows.net/* |
| 15 | https://update.celiveo365.cc/file/celiveoupdates/* | |
| 10 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://cvoblobeuprd.blob.core.windows.net/* |
| 11 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://< tenant name >.eu-gateway6575.celiveo.cloud/* |
| 13 | Celiveo Print Mobile (Smartphone) / Celiveo Virtual Printer (Win/macOS) Device | https://common.eu-gateway6575.celiveo.cloud/* |
| 14 | Celiveo Print Mobile (Smartphone) / Celiveo Virtual Printer (Win/MacOS) Device | https://< tenant name >.eu-gateway6575.celiveo.cloud/* |
| 15 | Celiveo Virtual Printer (Win only) | https://update.celiveo365.cc/file/celiveoupdates/* |
| Endpoints region: USA | ||
| 1 | Web Browser (Admin Workstation VLAN) | https://< tenant name >.us.celiveo365.com/* |
| 2 | Celiveo Admin Browser Agent (Admin Workstation VLAN) | https://sb-c365-prd-us.servicebus.windows.net/* |
| 3 | https://< tenant name >.us-aba7573.celiveo.cloud/* | |
| 3 | https://< tenant name >.us-gateway7573.celiveo.cloud/* | |
| 7 | Celiveo Printer Agent (Printer VLAN) | https://< tenant name >.us-gateway7573.celiveo.cloud/* |
| 8 | https://cvoblobusprd.blob.core.windows.net/* | |
| 9 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://sbq-c365-print-prd-us.servicebus.windows.net/* |
| 10 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://cvoblobusprd.blob.core.windows.net/* |
| 11 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://< tenant name >.us-gateway7573.celiveo.cloud/* |
| 13 | Celiveo Print Mobile (Smartphone) / macOS Device (Laptop/Workstation) | https://common.us-gateway7573.celiveo.cloud/* |
| 14 | Celiveo Print Mobile (Smartphone) / macOS Device (Laptop/Workstation) | https://< tenant name >.us-gateway7573.celiveo.cloud/* |
| Endpoints region: SG (Singapore) | ||
| 1 | Web Browser (Admin Workstation VLAN) | https://< tenant name >.sg.celiveo365.com/* |
| 2 | Celiveo Admin Browser Agent (Admin Workstation VLAN) | https://sb-c365-prd.servicebus.windows.net/* |
| 3 | https://< tenant name >.sg-aba7367.celiveo.cloud/* | |
| 3 | https://< tenant name >.sg-gateway7367.celiveo.cloud/* | |
| 7 | Celiveo Printer Agent (Printer VLAN) | https://< tenant name >.sg-gateway7367.celiveo.cloud/* |
| 8 | https://cvoprdblob.blob.core.windows.net/* | |
| 9 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://sbq-c365-print-prd-sg.servicebus.windows.net/* |
| 10 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://cvoprdblob.blob.core.windows.net/* |
| 11 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://< tenant name >.sg-gateway7367.celiveo.cloud/* |
| 13 | Celiveo Print Mobile (Smartphone) / macOS Device (Laptop/Workstation) | https://common.sg-gateway7367.celiveo.cloud/* |
| 14 | Celiveo Print Mobile (Smartphone) / macOS Device (Laptop/Workstation) | https://< tenant name >.sg-gateway7367.celiveo.cloud/* |
| Endpoints region: MX (Mexico) | ||
| 1 | Web Browser (Admin Workstation VLAN) | https://< tenant name >.mx.celiveo365.com/* |
| 2 | Celiveo Admin Browser Agent (Admin Workstation VLAN) | https://sb-c365-prd-mx.servicebus.windows.net/* |
| 3 | https://< tenant name >.mx-aba6d78.celiveo.cloud/* | |
| 3 | https://< tenant name >.mx-gateway6d78.celiveo.cloud/* | |
| 7 | Celiveo Printer Agent (Printer VLAN) | https://< tenant name >.mx-gateway.celiveo.cloud/* |
| 8 | https://cvoblobmxprd.blob.core.windows.net/* | |
| 9 | Celiveo Universal Printer Endpoint Agent | https://sbq-c365-print-prd-mx.servicebus.windows.net/* |
| 10 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://cvoblobmxprd.blob.core.windows.net/* |
| 11 | Celiveo Universal Printer Endpoint Agent (Reachability to Printer VLAN) | https://< tenant name >.mx-gateway6d78.celiveo.cloud/* |
| 13 | Celiveo Print Mobile (Smartphone) / macOS Device (Laptop/Workstation) | https://common.mx-gateway6d78.celiveo.cloud/* |
| 14 | Celiveo Print Mobile (Smartphone) / macOS Device (Laptop/Workstation) | https://< tenant name >.mx-gateway6d78.celiveo.cloud/* |
Network TLS Inspection and Celiveo 365 Certificate Validation
Celiveo 365 enforces Zero Trust Architecture (ZTA) on all outbound connections from modules (ABA, Printer Agent, winCVP/macCVP, UPE) to cloud gateway endpoints . As part of this, the module validates the server’s TLS certificate during the handshake, before any data is sent.
Some corporate network security appliances perform TLS/SSL inspection. When active on the network path, such an appliance intercepts the connection and presents its own certificate to the connecting client instead of forwarding the original server certificate.
Important: The module never reaches the Celiveo API in this situation. The connection is aborted by the module during the TLS handshake, on the client side, as soon as it detects that the certificate presented does not match the expected Celiveo certificate. No request is sent and no data is exchanged. The Celiveo cloud API is not involved and will not log any trace of the attempt.
How to identify this situation
In Admin Browser Agent (ABA) open the Start Diagnostics tool, a failed connection caused by TLS inspection will show the following in the Token Response section:
[Error] System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided RemoteCertificateValidationCallback.Resolution
Configure your network security appliance to bypass TLS inspection for Celiveo 365 gateway endpoints, in some cases this can be done from the workstation itself.
For a boarder configuration the bypass must be applied on the network segment or device specifically where the celiveo modules are running eg:
- Printer VLAN if a printer is installed with a Celiveo Printer Agent
- Laptop VLAN if a laptop is installed with winCVP/macCVP Agent or Admin Browser Agent (ABA)
- Service VLAN if a service machine is installed with UPE.
Last modified:
4 May 2026
Post your comment on this topic.