App Control: What URL/IP Addresses Must be Allowed For Access to the CDC Reputation Service

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What URL must be allowed for outbound connections to the CDC Reputation Service?

Environment

• App Control Servers: All Versions
• Collective Defense Cloud enabled

Resolution

1. The CDC Reputation Service URL is: 

   https://services.bit9.com

2. A more granular list of URLs to be allowed:

   services.bit9.com/DsServices/service.asmx
   services.bit9.com/DsServices/WCF_DSService.svc/messages
   services.bit9.com/services/ParityCenterSettings.aspx
   

3. Optionally, to allow App C server logs uploads, the following ULR is also needed: https://s3.amazonaws.com
4. To allow connections using IP addresses, the IPs are:

   34.199.106.202
   52.3.63.249

Additional Information

• The services.bit9.com certificate uses "http://cacerts.digicert.com/" to download CRL updates, so this may need to be whitelisted as well
• Please note, the IP addresses are subject to change without notice