Ehealth Certificate
To be able to connect to the Ehealthbox, you need a valid Ehealth Certificate for the organisation or healthcare worker:
https://www.ehealth.fgov.be/nl/support/basisdiensten/ehealth-certificaten
https://www.ehealth.fgov.be/fr/support/services-de-base/certificats/generalites
Important: For organizations and ehealthbox: Use the ehealth certificate with the default (=empty) applicationID
System clock
Each program using eHBOX needs a valid STS-token. This can only be acquired when using a correct system time. Therefore we advice all machines using eHealth connections, to synchronize with a time server.
DNS
(Only for customers using a local DNS server)
To deal with the alternating IP-address of the ehealth environments. Make sure the DNS time to live is short enough (e.g. 5 minutes).
Firewall configuration
The table below lists the different endpoints for Hector or Unified-Messaging. Depending on the product(s) your organisation has, please ensure that the relevant endpoints are accessible from the server on which the software is installed.
If needed, it is possible to configure a proxy.
Important: SSL Injection is not allowed
Firewall configuration Production
Module | Link | Type of service | Owner | IP-adresses |
| GDPR compliant transfer site for downloads of logs during Customer Support operations | Healthconnect/Corilus |
| |
| Used to download modules/packages during installations/upgrades | Healthconnect | 31.193.179.162 | |
| Used to download modules/packages during installations/upgrades | Healthconnect | 31.193.179.162 | |
| Used to download modules/packages during installations/upgrades | Healthconnect | Amazon IP ranges (CIDR): | |
| Azure Active Directory logon on Admin-console for Customer Support operations | Microsoft |
| |
| healthpages and reporting | Healthconnect | 31.193.179.162 | |
| Healthpages | Healthconnect | 31.193.179.162 | |
| eforms-cloud, mybox login | Healthconnect | 31.193.179.162 | |
| http://64.18.25.27 (geen https!) | Verizon revocatiecheck of ehealth certificates created before 5/6/2016 | Verizon | 64.18.25.27 |
| Quo Vadis revocatiecheck ehealth certificates created after 5/6/2016 | Quovadis | 52.210.206.107 | |
|
| Ehealth | eHealth uses a rolling IP-scheme for its servers on a three-monthly basis 193.191.246.23 New Ip-adresses communicated on 6/9/2019
New Ip-adresses communicated on 23/07/2021
| |
| ehealthbox webapp | Ehealth | idem supra | |
| Mycarenet | MyCarenet - NIC | 193.109.72.210 | |
| Vitalink server | Vitalink | 193.191.247.160 (before 1/8/2019) | |
| Healthdata Catalog needed for HD4DP | Healthdata - WIV/ISP | 94.143.190.169 | |
| Contains endpoint to register vaccinations | Vaccinet - VAZG | 185.195.136.25 | |
| Cloud Identification service of corilus, used during customer support interventions | HealthConnect / Corilus | 31.193.179.172 | |
| support authentication | Healthconnect | 52.51.113.131 | |
| endpoint for DAAS (Data authorisation service, used for Diabscan) | Riziv / Inami |
| |
| Contains WAR files for installations/upgrades | Healthconnect | 52.213.95.35 | |
| Healthpages check for upload result via Helena Webservice | Healthconnect | 31.193.179.160/27 | |
| Helena Mybox | Healthconnect | 31.193.179.160/27 | |
| Whitelist the following domains (connection on tcp 443) : | Tokbox | Dynamic | |
| MijnWGK endpoint | Wit-Gele Kruis | 46.31.89.9 | |
| Zorgmail | Zorgmail | 92.42.239.114 | |
| BCP Fail-over EHealth | Ehealth | 85.91.165.110 | |
| Healthservices |
| 31.193.179.166 | |
| ntp://pool.be.ntp.org | Belgian Time Server |
| |
|
|
| 31.193.179.160/27 en 77.73.103.128/27 |
Important: eHealth uses alternating IP-adresses for its servers. That is why there are mutiple options for IP addresses
Firewall configuration Acceptance
Link | Description | IP-addresses |
GDPR compliant transfer site for downloads of logs during Customer Support operations | Amazon IP ranges (CIDR): 52.192.0.0/11 | |
Azure Active Directory logon on Admin-console for Customer Support operations |
| |
reporting link, access to online yellow pages for eHealthbox | 54.195.185.175 | |
healthpages-acc.healthconnect.be | HealthPages ACC | 193.239.211.103 |
access link to the eforms cloud | 54.246.122.148 | |
acc-docs.healthconnect.be |
| 52.17.107.88 |
http://64.18.25.27 (geen https!) | Verizon revocatiecheck of ehealth certificates created before 5/6/2016 | 64.18.25.27 |
Quo Vadis revocatiecheck ehealth certificates created after 5/6/2016 |
| |
| eHealth uses a rolling IP-scheme for its servers on a three-monthly basis
New Ip-adresses communicated on 6/9/2019
| |
needed for ehealthbox connection | idem supra | |
mycarenet connection | 193.109.72.211 | |
vitalink connection | 193.191.247.55 (before 1/8/2019) | |
Healthdata Catalog needed for HD4DP | 94.143.190.169 | |
Needed for vaccinet gateway | 185.195.136.26 | |
Cloud Identification service of corilus, used during customer support interventions | 193.239.211.100 | |
Healthconnect | 52.51.113.131 | |
Contains WAR files for installations/upgrades | 52.213.95.35 | |
Helena webservice | 188.93.156.48/28 | |
Helena webservice | 188.93.156.48/28 |
Whitelist the following domains (connection on tcp 443) : | Dynamic | |
rddev.mijntvp.be | WitGeleKruis MijnWGK endpoint | 46.31.89.8 |
healthservices-acc.careconnect.be | Healthservices | 188.93.156.52 |
| 188.93.156.48/28 en 193.239.211.96/28 |