Whitelisting URLs for Security Analytics

Products

• Security Analytics
• Security Analytics - VA

Issue/Introduction

Are there any URLs that need to be whitelisted on our proxy servers that the Security Analytics appliances need to connect to?  There are many IP addresses where the URLs may resolve. External providers, like our Global Intelligence Cloud, need to be white listed to allow traffic while excluding any unknown traffic.

Resolution

The domains to be white listed are found in the Help pages available in our application.  Search for "Ports and Protocols" to find the search box.  Help is found by selecting the About ball, the circle with the small 'i' in the top right section of the Security Analytics user interface.  This lists the domain names for the inbound and outbound traffic.