The following URLs and their respective IP addresses will need to be accessible for an IronKey Enterprise Managed Service account and devices to work properly:

my.ironkey.com (port 80/tcp and 443/tcp)
services.ironkey.com(port 443/tcp)
upda.ironkey.com (port 443/tcp)
updb.ironkey.com (port 80/tcp and 443/tcp) 
my.safeconsole.com (port 80/tcp and 443/tcp)
upda.safeconsole.com (port 443/tcp)
updb.safeconsole.com (port 80/tcp and 443/tcp)

*You may also add an exception for *.ironkey.com and *.safeconsole.com if your proxy/firewall allows wildcards, or place an exception for the 70.42.140.0/24 and 140.82.185.64/28 subnets

Please keep in mind that if either your network switches or any other network appliances are conducting SSL traffic inspection on device traffic to or from the EMS server, this could also cause network device issues.

If you have a proxy in place for your environment, you might also be impacted by the public cipher deprecation in use for certain IronKey devices. 
Please review the following KB Article for additional information. 

https://support.datalocker.com/support/solutions/articles/4000120583-ems-cloud-cipher-deprecation