Use a Service Tunnel to route to Salesforce

A step-by-step guide on how to use CSE’s Service Tunnel to route to public domains, such as SaaS services
Updated On: May 21, 2026

Overview

In addition to routing traffic to your private networks, Service Tunnels can route public traffic destined for the internet. Internet traffic routed through your Service Tunnels uses the source IP of a CSE Access Tier. Admins can then IP whitelist to restrict user access on login and throughout a user’s session on a SaaS platform. Here, we show how to use a Service Tunnel to route to multiple Salesforce subdomains.

Prerequisites

  • An admin account in Salesforce
  • An admin role in a CSE org
  • An Access Tier that can be used for the Service Tunnel you register

Steps