App Control: What URL/IP Addresses Must be Allowed For Access to the CDC Reputation Service

[#1]

Environment

• App Control Servers: All Versions
• Collective Defense Cloud enabled

Question

What URL must be allowed for outbound connections to the CDC Reputation Service?

Answer

1. The CDC Reputation Service URL is: 

   https://services.bit9.com

2. A more granular list of URLs to be allowed:

   services.bit9.com/DsServices/service.asmx
   services.bit9.com/DsServices/WCF_DSService.svc/messages
   services.bit9.com/services/ParityCenterSettings.aspx
   

3. Optionally, to allow App C server logs uploads, the following ULR is also needed: https://s3.amazonaws.com
4. To allow connections using IP addresses, the IPs are:

   34.199.106.202
   52.3.63.249

Additional Notes

• The services.bit9.com certificate uses "http://cacerts.digicert.com/" to download CRL updates, so this may need to be whitelisted as well
• Please note, the IP addresses are subject to change without notice

Related Content

App Control File Reputation IP Address Changes Bit9 Server connection to Bit9 Software Reputation Service is unavailable for longer than 3 hours
App Control: How To Check CDC/SRS Status and Connectivity
App Control: CDC/SRS Connectivity Error: Could not establish trust relationship for the SSL/TLS secu...