Whitelisting URLs or IPs for Agent Communication
- Vrushali Parkar
- Vrushali
- Srikant Sreenivasan
Whitelist below Cloudflare R2 URL OR IP ranges for agent communication. These are applicable for all cloud regions.
https://45ee58f3bc4d04c0e1ae971fde066899.r2.cloudflarestorage.com/
Below are the IP ranges:
173.245.48.0/20
103.21.244.0/22
103.22.200.0/22
103.31.4.0/22
141.101.64.0/18
108.162.192.0/18
190.93.240.0/20
188.114.96.0/20
197.234.240.0/22
198.41.128.0/17
162.158.0.0/15
104.16.0.0/13
104.24.0.0/14
172.64.0.0/13
131.0.72.0/22For the CyberCNS Agent Communication, whitelist the URLs and IPs below specific to the respective SaaS-hosted regions.
US-EAST-2 (If your domain is hosted in the US-EAST-2 region, whitelist the below URLs)
Whitelist the below URLs for agent Communication with CyberCNS US-EAST-2 region.
https://configuration.mycybercns.com
https://portaluseast2.mycybercns.com/*
https://s3.us-east-2.amazonaws.com ​
​https://kinesis.us-east-2.amazonaws.com
https://kinesis-fips.us-east-2.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.comIf you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for CyberCNS US-EAST-2 region.
S3 Default IP ranges US-EAST-2 |
|---|
52.219.212.0/22 |
52.219.143.0/24 |
52.219.141.0/24 |
18.34.72.0/21 |
3.5.128.0/22 |
52.219.142.0/24 |
52.219.96.0/20 |
3.5.132.0/23 |
52.219.232.0/22 |
18.34.252.0/22 |
52.219.176.0/22 |
16.12.60.0/22 |
52.219.224.0/22 |
52.219.80.0/20 |
52.219.228.0/22 |
3.141.102.208/28 |
3.141.102.224/28 |
S3 URLs US-EAST-2 |
34.194.189.151 |
3.233.131.44 |
52.22.169.69 |
54.84.20.167 |
18.155.99.86 |
18.155.99.108 |
18.155.99.60 |
18.155.99.75 |
104.26.12.175 |
104.26.13.175 |
172.67.69.215 |
18.155.99.86 |
US-WEST-2(if your domain is hosted in US-WEST-2 region white list the below URLs)
Whitelist the below URLs for agent Communication with CyberCNS US-WEST-2 region.
https://configuration.mycybercns.com
https://portaluswest2.mycybercns.com/*
https://s3.us-west-2.amazonaws.com ​
​https://kinesis.us-west-2.amazonaws.com
https://kinesis-fips.us-west-2.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.com
If you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for US-WEST-2 region.
S3 Default IP ranges US-WEST-2 |
3.5.76.0/22 |
18.34.244.0/22 |
18.34.48.0/20 |
3.5.80.0/21 |
52.218.128.0/17 |
52.92.128.0/17 |
35.80.36.208/28 |
35.80.36.224/28 |
S3 URLs US-WEST-2 |
34.194.189.151 |
3.233.131.44 |
52.22.169.69 |
54.84.20.167 |
13.249.221.15 |
13.249.221.104 |
13.249.221.17 |
13.249.221.107 |
104.26.12.175 |
104.26.13.175 |
172.67.69.215 |
18.155.99.86 |
AP-SOUTHEAST-2(if your domain is hosted in the AP-SOUTHEAST-2 region white list the below URLs)
Whitelist the below URLs for agent Communication with CyberCNS AP-SOUTHEAST-2 region.
https://configuration.mycybercns.com
https://portalapsoutheast2.mycybercns.com/*
https://s3.ap-southeast-2.amazonaws.com ​
​https://kinesis.ap-southeast-2.amazonaws.com
https://kinesis-fips.ap-southeast-2.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.com
If you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for the AP-SOUTHEAST-2 region.
S3 Default IP Range ApSouthEast-2 |
52.95.128.0/21 |
3.5.164.0/22 |
3.5.168.0/23 |
3.26.88.0/28 |
3.26.88.16/28 |
S3 URLs AP-SOUTHEAST-2 |
34.194.189.151 |
3.233.131.44 |
54.84.20.167 |
52.22.169.69 |
18.161.216.57 |
18.161.216.77 |
18.161.216.17 |
18.161.216.54 |
104.26.12.175 |
104.26.13.175 |
172.67.69.215 |
18.155.99.86 |
Whitelist the below URLs for agent Communication with the CyberCNS EU-WSET-2 region.
https://configuration.mycybercns.com
https://portaleuwest2.mycybercns.com/*
https://s3.eu-west-2.amazonaws.com ​
​https://kinesis.eu-west-2.amazonaws.com
https://kinesis-fips.eu-west-2.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.com
IIf you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for EU-WSET-2 region.
S3 Default IP Ranges Eu-West-2 |
52.95.150.0/24 |
16.12.15.0/24 |
16.12.16.0/23 |
52.95.148.0/23 |
52.219.219.0/24 |
52.95.144.0/24 |
52.95.142.0/23 |
52.95.191.0/24 |
3.5.244.0/22 |
18.168.37.160/28 |
18.168.37.176/28 |
S3 URLs EU-WSET-2 |
34.194.189.151 |
3.233.131.44 |
52.22.169.69 |
54.84.20.167 |
18.155.99.78 |
18.155.99.36 |
18.155.99.37 |
18.155.99.21 |
104.26.12.175 |
104.26.13.175 |
172.67.69.215 |
18.155.99.86 |
https://configuration.mycybercns.com
https://portaleucentral2.mycybercns.com/*
https://s3.eu-central-1.amazonaws.com ​
​https://kinesis.eu-central-1.amazonaws.com
https://kinesis-fips.eu-central-1.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.com
If you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for EU-CENTRAL-1 region.
S3 Default Ip ranges Eu-Central-1 |
52.219.170.0/23 |
52.219.168.0/24 |
16.12.32.0/22 |
16.12.24.0/21 |
3.5.136.0/22 |
52.219.72.0/22 |
52.219.211.0/24 |
52.219.210.0/24 |
52.219.218.0/24 |
52.219.44.0/22 |
52.219.169.0/24 |
52.219.140.0/24 |
52.219.208.0/23 |
3.5.134.0/23 |
3.65.246.0/28 |
3.65.246.16/28 |
S3 URLs EU-CENTRAL-1 |
34.194.189.151 |
3.233.131.44 |
54.84.20.167 |
52.22.169.69 |
18.161.216.50 |
18.161.216.128 |
18.161.216.46 |
18.161.216.40 |
104.26.13.175 |
104.26.12.175 |
172.67.69.215 |
18.155.99.86 |
Please whitelist https://chocolateyrepo.mycybercns.com/chocolatey so that the lightweight agent responsible for patching should be able to communicate with the CyberCNS Chocolatey server for successful patching.
Â