Fusebox Gateway

Affected Service: Fusebox Gateway

Elavon is working to migrate our transaction processing to two new data centers to ensure network resiliency and uninterrupted service.

As we approach final implementation, we would like to share the schedule below and encourage mutual merchants and partners who still need to complete the critical action steps necessary for uninterrupted service post-migration to do so immediately.

The work taking place during the September dates below is similar to routine maintenance downtime and should not impact merchants.

Wednesday, Sept. 20

We will utilize DNS and advertise one of our existing addresses, 198.203.192.253 (KNX) while we perform our migration work. The 198.203.191.116 (ATL) IP address may be unavailable for up to one hour during this change. All traffic will be processed through the 198.203.192.253 (KNX) communication lines.

Wednesday, Sept. 27

We will utilize DNS and advertise one of our existing addresses, 198.203.191.116 (ATL) while we perform our migration work. The 198.203.192.253 (KNX) IP address may be unavailable for up to one hour during this change. All traffic will be processed through the 198.203.191.116 (ATL) communication lines.

Wednesday, Oct. 4

We will start advertising the OBC & CBC IP addresses (204.x) via DNS exclusively. The ATL and KNX IP addresses (198.x) will still be available, but only the 204.x addresses will be advertised. Also, we will move our backup Fusebox processing platform from Atlanta (ATL) to Olathe (OBC) on this date. No customer impact is expected.

Wednesday, Oct. 11

We will move our primary Fusebox processing platform from Atlanta (KNX) to Chaska (CBC) on this date.

IMPORTANT NOTE:

Wednesday, Oct. 11 – Wednesday, Oct. 31

During this time, we will continue to intermittently remove the 198.x addresses for periods of time and only process via the 204.x addresses. This will not impact merchants who utilize DNS and have completed the critical action steps below.

IP Addresses

-Elavon owns several IP address ranges documented here:

Elavon Domains and IP Addresses - Elavon Developer Portal

-We are asking mutual customers that restrict or whitelist outbound internet traffic to whitelist all documented Elavon-owned addresses. (See “IP addresses to Allow”).

*If you do not restrict outbound internet traffic, more than likely no action is required but this can be verified by sending a test to the URLs below.

-Mutual Fusebox customers can test by sending transactions to:

URLs:

Current Production URL:

fuseboxtrant.elavon.net:<port>

Test URLs:

cbc.fuseboxtrant.elavon.net:<use the same port you currently have configured>

obc.fuseboxtrant.elavon.net:<use the same port you currently have configured>

The documented test addresses are linked to the production Fusebox system. They can test with a test card or an actual POS transaction. NOTE - They should only use these addresses to verify connectivity and then promptly remove them.

Frequently Asked Questions:

Why is Elavon requesting the whitelisting of such large IP ranges?

Elavon owns these ARIN-registered ranges. By utilizing various data centers, distributed Edge networking and Cloud access points, Elavon can offer a highly resilient and secure infrastructure with multiple IP addresses within the documented ranges.

Can we run a real transaction through the test URLs?

Yes. The test URLs connect to the Fusebox production system utilizing URL-specific certificates, ensuring “like for like” testing of transactions to the new IP ranges.

If we perform a successful transaction, do we need to do anything else?

While successful transactions to the test URLs indicate connectivity to new IP addresses within the two IP ranges below, your organization may need to take additional steps.

204.194.192.0/22

204.194.196.0/22

What if I have already whitelisted Elavon IP addresses?

The newly whitelisted ranges we provided should take the place of rules and/or IPs you have previously whitelisted. Double-check to make sure your IP addresses are within the provided ranges. You should not have to whitelist individual IP addresses within the range.

What are the “Other IP addresses” listed on the Elavon Domains and IP Addresses - Elavon Developer Portal?

Elavon uses Akamai for Cloud-based WAF (Web Application Firewall) protections. You may also need to whitelist these IP addresses if you are restricting outbound traffic. These are not commonly restricted, and we have included the information required to verify your configuration.

Will I have to do this again?

While Elavon may acquire additional IP space in the future, the ranges provided consider our current needs and expansion plans.

If you have questions, please call Gateway Support at 1-866-265-6225, option 3.

DNS Updates

Most of our mutual customers who have set up their system using our documented development standards should have no issues. If they are unable to test connectivity, they should contact Gateway Support at 1-866-265-6225, option 3.

We appreciate your partnership in our effort to enhance our system data security and reliability.

Customer Service Contact Information: 866-265-6225

If you no longer wish to receive these notifications, please click the “Manage your subscription” option on your email or visit status.Elavon.com to update your notification preferences.