We have a customer that is migrating from a Sonicwall to a Meraki. They have a rule that allows all Salesforce hosts and networks inbound to the user network on ports 80 and 443. I can't find any documentation on the traffic flow for salesforce. I would think the user would always initiate the connection and this rule is not needed. I've never worked with Salesforce. Do you know if the connection is always initiated by the user like normal applications.?
