# Firewalls and security ## Firewall settings A firewall is a security system that prevents external, untrusted networks from accessing your internal network. It can do this by filtering incoming requests from specific ports or IPs, requiring user authentication, proxies, and network address translation (NAT). ## Allow port numbers 1. Allow port 443 for API requests 2. Allow webhook URL ports {% hint style="info" %} You can request a callback URL for webhook registration by excoinz email. * [partner@excoinz.com](mailto:partner@excoinz.com?subject=Excoinz%20Inquiry\&body=) {% endhint %} ## Add an IP access control list If your game company's server categorizes traffic with an IP [Access Control List (ACL)](https://en.wikipedia.org/wiki/Access-control_list) to allow or deny traffic, please allow Excoinz ExPay's IP address. Allow access to the following IPs and inbound requests will be sent as normal. * 13.229.255.195 ## HTTP Protocol The Excoinz ExPay API must be called over HTTPS. [HTTPS](https://en.wikipedia.org/wiki/HTTPS) is a secured version of HTTP. Because data sent to and from HTTP is unencrypted plaintext, it can leak personal information, so you should use HTTPS, a more secure protocol that protects your customers' payment information and personal data. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://payment.excoinz.com/firewalls-and-security.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.