CA's Digital Experience Insights Platform(DXI) offers number of agent types that connect to CA SaaS infrastructure: https://docops.ca.com/ca-application-performance-management-digital-experience-insights-from-ca/ga/en/implementing-agents.
How should an environment's firewall be configured to allow agent connections to the DXI?
To allow agent connections into the DXI, then whitelist *.cloud.ca.com. IP addresses used in the environment are dynamic and consequently cannot be used.
As always, contact CA Support if having further questions.