Using Bing Maps on a locked-down network

Question

A customer of ours has a tightly locked network. Most traffic is denied, and specific exemptions can be made. Our WPF application uses the Bing Maps. When run on our customer's network, the error message "Invalid Credentials. Sign up for developer credentials at..." is displayed on the map.

I wish to advise our customer as to which addresses they must allow our application to access to avoid this error. So far, I have found:

dev.virtualearth.net
ecn.t0.tiles.virtualearth.net
ecn.t1.tiles.virtualearth.net
ecn.t2.tiles.virtualearth.net
ecn.t3.tiles.virtualearth.net

Are there other addresses that Bing Maps must access? Does Bing Maps ever try to access hosts outside of the *.virtualearth.net domain (if we open that up, will the application work)?

Thanks in advance,

 - Barry Smith

Answer 1

Hi Barry,

All of our tile imagery domains will end with tiles.virtualearth.net. If customers can whitelist everything under that, it would be sufficient.

• ak.dynamic.tx.tiles.virtualearth.net where x=0,1,2,3
• tx.ssl.ak.dynamic.tiles.virtualearth.net where x=0,1,2,3
• tx.ssl.ak.tiles.virtualearth.net where x=0,1,2,3
  

However, for the broader use cases there are the following domains:

• *.bing.com (for use of the v8 Mapcontrol)
  
• dev.virtualearth.net
• ecn.dev.virtualearth.net
• spatial.virtualearth.net
• platform.bing.com

Sincerely,

IoTGirl