This article covers Amion network and system requirements for IT professionals and administrators. Clinicians and schedulers using Amion do not need to configure anything.
For IT professionals
We recommend that you allow list Amion URIs for the best possible experience for your clinicians using Amion. Some of the URIs below belong to our vendors and are also important to include when preparing your network for our product.
Allow List URIs (Protocol and Port)
Critical — Amion will not function without these:
- *.amion.com (HTTPS/443)
- *.doximity.com (HTTPS/443)
- *.googleapis.com (HTTPS/443)
- *.recaptcha.net (HTTPS/443)
- *.bugsnag.com (HTTPS/443)
Important — Amion will function but with a degraded experience without these:
- api.segment.io (HTTPS/443)
- cdn.segment.com (HTTPS/443)
Optional — Used by mobile apps only:
- sdk-api-v1.singular.net (HTTPS/443)
Allow List IP Address Ranges
Amion is served through Amazon CloudFront, which dynamically routes traffic across a large pool of edge IPs based on geographic proximity, load, and availability. Because of this, we cannot confirm specific fixed IPs or IP ranges — a subsequent DNS resolution could return entirely different addresses, and locking firewall rules to a static list would likely result in intermittent connectivity failures.
For reliable access, we recommend allow-listing the full CloudFront IP ranges. AWS publishes and maintains this list:
More background on CloudFront IP ranges:
Supported Browsers
The following table indicates the browsers supported by Amion. We support the most recent version of these browsers and recommend keeping your browser updated for optimal performance and experience.
| Operating system | Chrome | Firefox | Safari | Edge |
|---|---|---|---|---|
| Android | ✓ | - | - | - |
| iOS | ✓ | - | ✓ | - |
| Mac OS | ✓ | ✓ | - | ✓ |
| Windows | ✓ | ✓ | - | ✓ |
Email Allow List
If you are able to create an allow list of email servers by domain, allow list the following. Amion uses these to deliver schedule notifications, on-call alerts, and other clinical communications:
- o1.email.doximity.com
- o2.email.doximity.com
- o3.email.doximity.com
- o4.email.doximity.com
- o5.email.doximity.com
- o6.email.doximity.com
- o7.email.doximity.com
- o8.email.doximity.com
- o9.email.doximity.com
Amion Real-Time WebSocket (WSS) Network Requirements
Purpose
Some hospital and enterprise networks restrict outbound WebSocket traffic. This document specifies the network access required for Amion's real-time collaborative scheduling features so IT teams can allowlist it correctly.
Required endpoints
| Item | Value |
|---|---|
| Destination hosts |
amion-anycable.amion.com and amion-anycable.doximity.com (same service) dox-anycable.doximity.com |
| Protocol | WSS (WebSocket over TLS) |
| Port | TCP 443 — no other inbound ports required |
| URL path | /cable |
| Handshake | Standard HTTP/1.1 Upgrade: websocket over TLS |
Configuration requirements
- Allow WebSocket Upgrade, not just HTTPS. Network devices or proxies that terminate TLS and rebuild the request must preserve the Upgrade: websocket and Connection: Upgrade headers. A rule that only permits TCP 443 will still fail if those headers are stripped. This is the most common cause of blocked WSS.
- Pass the Origin header through unchanged. The service validates it against the application origin (https://www.amion.com).
- Allowlist by hostname. The service sits behind a load-balanced, multi-IP endpoint with no fixed address to publish.
- No cookies or additional authentication ports are involved. The connection authenticates with a short-lived token issued by the application over HTTPS.
Background: when this requirement appeared
This dedicated WebSocket host is used exclusively by Amion's real-time collaborative schedule editing.
- The collaborative editing feature first shipped with its real-time traffic running over the application's normal web origin.
- It was later moved to a dedicated WebSocket host for scale, and that change is when this host began requiring network access.
- No other product functionality depends on these hosts.
Other FAQs
What devices do you support?
For clinicians and schedulers using the Amion mobile app:
- iOS: Visit our Apple App Store page for supported versions.
- Android: Visit our Google Play Store page for supported versions.
For schedulers using Amion on a desktop computer:
- Mac OS: Chrome, Firefox, Edge
- Windows: Chrome, Firefox, Edge
Want to learn about Amion Secure Messaging?
To learn more about Amion Secure Messaging, along with the configuration requirements, click Amion Secure Messaging.
Note: We recommend keeping your browser updated to the most recent version available.