Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: What’s the static IP address or hostname used by the back-end?

Carbon Black Cloud: What’s the static IP address or hostname used by the back-end?

Environment

  • Carbon Black Cloud Console: All Versions 
  • Carbon Black Cloud Sensor: All Versions

Question

What IP address can be used to configure a proxy server or firewall to allow outgoing connections from the sensor to the backend Carbon Black Cloud Internet Protocol (IP) address or hostname?

Answer

  • The current implementation of the Carbon Black Cloud service uses dynamically managed load balancer(s) in order to provide the best possible levels of scalability, reliability, and performance. This means that your server <hostname>.confer.net or <hostname>.conferdeploy.net will resolve to one of many possible domain name alias(s) or Canonical Name (CNAME) DNS record(s) depending on your region. The CNAME will also resolve to one of many possible IP addresses(s) which will likewise change dynamically. In this case, you will not be able to configure a static IP address or hostname in the bypass rules of your network proxy or firewall.
  • In order to ensure that the sensor is able to communicate to the cloud service, please configure your proxy server or firewall to allow outgoing connections to either TCP/443 or TCP/54443. If the sensor cannot establish connectivity over the standard SSL port TCP/443, it will failover to the alternate port: TCP/54443.

Related Content


Was this article helpful? Yes No
75% helpful (3/4)
Article Information
Author:
Creation Date:
‎02-12-2019
Views:
16760
Contributors