Merlyn Origin Network Allowlist

All traffic is TCP port 443.

All traffic is routed through Merlyn domains: 
If desired, using a wildcard in the rule is possible. 

• *.merlyn.org
• *.apps.merlyn.org

If allowed, you can cover both of these with: **.merlyn.org

Otherwise, these are the individual DNS names:

• emea.workflows.merlyn.org
• emea.ws-api.merlyn.org
• emea.rest-api.merlyn.org
• emea.chat.merlyn.org
• emea.clogin.merlyn.org
• emea.tts.merlyn.org
• emea-logs.apps.merlyn.org
• emea-sentry.apps.merlyn.org

If Using Merlyn on ChromeOS, please include:

• logs.eu-west-1.amazonaws.com
• cognito-identity.eu-west-1.amazonaws.com
• sts.eu-west-1.amazonaws.com
• cognito-idp.eu-west-1.amazonaws.com

You may also need to add the desktop application to your security safe list.