App Control: What URL/IP Addresses Must be Allowed For Access to the CDC Reputation Service
search cancel

App Control: What URL/IP Addresses Must be Allowed For Access to the CDC Reputation Service

book

Article ID: 290773

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What URL must be allowed for outbound connections to the CDC Reputation Service?

Environment

  • App Control Servers: All Versions
  • Collective Defense Cloud enabled

Resolution

  1. The CDC Reputation Service URL is: 
    https://services.bit9.com
  2. A more granular list of URLs to be allowed:
    services.bit9.com/DsServices/service.asmx
    services.bit9.com/DsServices/WCF_DSService.svc/messages
    services.bit9.com/services/ParityCenterSettings.aspx
    
  3. Optionally, to allow App C server logs uploads, the following ULR is also needed: https://s3.amazonaws.com
  4. To allow connections using IP addresses, the IPs are:
    34.199.106.202
    52.3.63.249

Additional Information

  • The services.bit9.com certificate uses "http://cacerts.digicert.com/" to download CRL updates, so this may need to be whitelisted as well
  • Please note, the IP addresses are subject to change without notice