Third-Party Domains Required for Email Protection Admin User Interfaces
Email Protection admin user interfaces (UIs), including Email Gateway Defense (EGD), Impersonation Protection (IP), and Incident Response (IR), use third-party services to deliver certain features. If your organization applies domain-level firewall restrictions, web proxy allow lists, or content-filtering policies, you must allow access to the domains listed below. Blocking these domains can prevent Email Protection admin UIs from loading correctly.
Split.io (Feature Management Service)
Email Protection admin UIs use Split (operated by Split Software / Harness FME) as a feature-flag service. The Split browser SDK is loaded by these admin UIs to determine which features are enabled for your account and to gate some access paths.
Important: This is not user authentication. The auth.split.io domain authenticates the SDK client to Split, not the Barracuda admin user. No administrator credentials are sent to or validated by Split.
Required Domains
Allow traffic from administrator browsers to the following domains:
sdk.split.io
auth.split.io
events.split.io
streaming.split.io
cdn.split.io
For the full list of Split network requirements, refer to the Split.io documentation.
What Happens If These Domains Are Blocked
When the Split domains are unreachable, the SDK cannot retrieve feature-flag definitions. The affected admin UI may fail to render or hang, which can surface as a "Server Error" message in the browser.
Notes
These domains are not owned or operated by Barracuda Networks.
For Barracuda-owned IP ranges required for EGD mail flow and LDAP connectivity, see Email Gateway Defense IP Ranges Used for Configuration.