When you see the “Sync Cannot Be Established” error in Notion while connected to your company network, your work stops cold. This error means Notion’s desktop or web app cannot reach its cloud servers because of network restrictions. Corporate networks often block WebSocket connections, restrict certain ports, or intercept traffic through proxy servers. This article explains the root cause and provides step-by-step fixes to restore Notion sync on your corporate network.
Key Takeaways: Restoring Notion Sync on a Corporate Network
- Settings & Members > Network > Use Proxy: Configure manual proxy settings if your company uses an HTTP proxy server.
- Windows Firewall > Outbound Rules > New Rule: Create an outbound rule to allow Notion.exe traffic on TCP ports 443, 80, and 8080.
- VPN Client > Split Tunneling: Enable split tunneling to route Notion traffic outside the corporate VPN.
Why Corporate Networks Block Notion Sync
Notion uses persistent WebSocket connections on port 443 to sync changes in real time. Corporate networks often block WebSocket traffic or restrict outbound connections to approved IP ranges and ports. Many companies also route all HTTP and HTTPS traffic through a forward proxy, which can break Notion’s direct connection to its servers. Additionally, if your organization uses a VPN with full-tunnel configuration, all Notion traffic is forced through the corporate network and subject to its firewall rules. The error appears because Notion cannot establish or maintain a live connection to its sync servers.
How Notion Sync Works
Notion uses a combination of HTTPS REST API calls for initial data load and WebSocket connections for real-time updates. The WebSocket endpoint is wss://msgstore.www.notion.so. If your network blocks WebSocket upgrade requests or drops long-lived connections, sync fails. The desktop app also checks for updates and downloads attachments via HTTPS, so a blocked port 443 alone can trigger the error.
Common Corporate Network Restrictions
Corporate firewalls may block outbound traffic on non-standard ports, even if they allow port 443. Some networks use SSL inspection, which re-encrypts traffic with a corporate certificate. Notion’s certificate pinning may reject this re-encrypted traffic, causing the sync error. Proxy servers that require authentication or that strip WebSocket headers also break Notion sync.
Steps to Fix Notion Sync on a Corporate Network
Try these fixes in order. After each fix, restart Notion and check if sync resumes.
- Configure Proxy Settings in Notion Desktop
Open Notion desktop. Click your avatar in the top-right corner, then select Settings & Members. Go to Network. Under Proxy, select Manual. Enter your corporate proxy server address and port. If your proxy requires authentication, enter your credentials. Click Save. Restart Notion. - Allow Notion Through Windows Firewall
Open Windows Security from the Start menu. Click Firewall & network protection. Click Allow an app through firewall. Click Change settings. Click Allow another app. Browse toC:\Users\[YourUsername]\AppData\Local\Programs\Notion\Notion.exe. Select Notion.exe and click Add. Ensure both Private and Public checkboxes are checked. Click OK. - Use Notion in a Browser Instead of Desktop
Open your corporate browser (Edge, Chrome, or Firefox). Navigate tohttps://www.notion.so. Log in. If the browser version syncs correctly, the issue is specific to the desktop app’s network handling. Continue with the remaining fixes to resolve the desktop app. - Disable SSL Inspection for Notion Domains
Contact your IT administrator. Ask them to add the following domains to the SSL inspection bypass list:www.notion.so,msgstore.www.notion.so,notion.so, and all subdomains. This prevents the corporate proxy from re-encrypting Notion traffic. - Enable Split Tunneling on Your VPN
If you use a corporate VPN, open your VPN client settings. Look for Split Tunneling or Route Exclusions. Addnotion.soandwww.notion.soto the exclusion list. This sends Notion traffic directly to the internet instead of through the VPN tunnel. Apply the change and reconnect the VPN. - Use Notion’s Offline Mode to Force Sync
Open Notion desktop. Go to Settings & Members > Notifications. Enable Use offline mode. Make edits while offline. When you reconnect to the corporate network, Notion will attempt to sync. If the error persists, the offline mode does not bypass network restrictions but may trigger a sync retry.
If Notion Still Shows the Sync Error
If none of the above steps work, the corporate network likely has a policy that blocks Notion entirely. Below are additional scenarios and their fixes.
Notion Sync Error on a Guest Wi-Fi Network
Guest networks often block WebSocket traffic. Connect to the corporate main network instead. If that is not possible, use Notion’s web app in a browser with a mobile hotspot for initial sync, then switch back to the guest network for offline work.
Notion Desktop App Fails but Web App Works
This indicates the desktop app’s network stack is blocked. Reinstall Notion desktop to reset its network configuration. Uninstall Notion from Settings > Apps > Apps & features. Download the latest version from https://www.notion.so/desktop. Install and apply the proxy settings from Step 1 before logging in.
Sync Error After a Windows Update
A Windows update may have changed firewall rules. Open Windows Defender Firewall with Advanced Security. Click Outbound Rules. Verify that Notion has an “Allow” rule for TCP ports 443 and 80. If not, create a new outbound rule: Right-click Outbound Rules, select New Rule. Choose Program. Browse to Notion.exe. Select Allow the connection. Apply to all profiles. Name the rule “Notion Outbound”.
Notion Desktop vs Web App on Corporate Networks: Key Differences
| Item | Notion Desktop App | Notion Web App |
|---|---|---|
| Connection type | WebSocket + HTTPS | HTTPS only |
| Proxy support | Manual proxy configuration | Uses browser proxy settings |
| SSL inspection impact | Breaks due to certificate pinning | May work if browser trusts corporate cert |
| Offline mode | Available | Not available |
| Firewall dependency | Local firewall rules required | Relies on browser’s network access |
Now you can identify whether the desktop or web version is more suitable for your corporate environment. If your IT team cannot whitelist Notion domains, the web app is the more reliable choice despite lacking offline capabilities.
After applying the proxy settings or firewall rules, test sync by editing a page and watching for the green checkmark. If the error persists, ask your IT team to review firewall logs for connections to msgstore.www.notion.so on port 443. A targeted whitelist for that single endpoint often resolves the issue without opening access to the entire Notion domain.