In order for Amplitude to be able to track events, the browser must be able to send an HTTP POST request. An ordinary PC firewall shouldn’t block requests from a browser.
At the domain level, safelist api.amplitude.com. This is the URL used for event ingestion.
Amplitude has a broad range of IP addresses dynamically assigned by AWS. Anything in amazon’s us-west-2 region could come up. See this article for more information.
A big corporate network infrastructure might have IP or domain safelists or blocklists. If you have an IP safelist, this could be an issue because Amplitude's HTTP API IP addresses can rotate.
To safelist the current IPs, use:
dig api.amplitude.com