EDR: What are the firewall and connectivity requirements for the EDR Server?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What are the firewall and connectivity requirements for the EDR Server?

Environment

• EDR Server (formerly CB Response): All versions

Resolution

Internet connectivity through outbound TCP ports is required on the EDR Server system for the scenarios described in the following table.
 

Scenario	Description	Address
EDR Yum Repository	The RPM installer sets up a Yum repository.	yum.carbonblack.com:443 yum.distro.carbonblack.io:443
EDR Alliance Server and CB Threat Intel	The Alliance Server and CB Threat Intel provide threat intelligence and can enable further analysis of files on endpoints through CB Threat Intel partners. To view all threat intelligence data, you need both addresses.	api.alliance.carbonblack.com:443 threatintel.bit9.com:443
CentOS Yum Repository	The standard CentOS Yum repository server used during CB Response server installation to download standard packages	mirror.centos.org:80