Aurora Endpoint Security network prerequisites
Aurora Endpoint Security agents and Aurora Protect Mobile apps require access to specific domains so that they can communicate with the cloud console.
Aurora Endpoint Security agents
Make sure your organization's network allows connections to the required domains for these components:
Port 443 (HTTPS) must be open for the Aurora Endpoint Security desktop agents to communicate with the management console.
The agents communicate over secure websockets (WSS) and must be able to establish this connection directly. Configure your organization's network to allow connections to these domains.
- The management console is hosted by AWS and does not have fixed IP addresses. You can allow HTTPS traffic to *.cylance.com. For the cylance-optics-files-use1.s3.amazonaws.com host (and similar hosts for other regions), it is recommended to allow that specific host. It is not recommended to allow *.amazonaws.com because it can open your network to other hosts.
- Please note that the domain api2.cylance.com is deprecated, but is kept open to support older Aurora Protect Desktop agents. api2.cylance.com directs to the same destination as api.cylance.com for the purpose of threat analysis and risk scoring.
|
Item |
Description |
|---|---|
|
North America |
Required for logging in to the Endpoint Defense console:
|
|
Required for Aurora Protect Desktop:
|
|
|
Required for Aurora Focus:
|
|
|
Required for the Gateway agent:
Required for the Gateway Connector: deb.nodesource.com Required for the Gateway agent and the Gateway Connector: us1.bg.blackberry.com For more information, see KB 42221223173659. |
|
|
Asia-Pacific Northeast |
Required for logging in to the Endpoint Defense console:
|
|
Required for Aurora Protect Desktop:
|
|
|
Required for Aurora Focus:
|
|
|
Required for the Gateway agent:
Required for the Gateway Connector: deb.nodesource.com Required for the Gateway agent and the Gateway Connector: jp1.bg.blackberry.com For more information, see KB 42221223173659. |
|
|
Asia-Pacific Southeast |
Required for logging in to the Endpoint Defense console:
|
|
Required for Aurora Protect Desktop:
|
|
|
Required for Aurora Focus:
|
|
|
Required for the Gateway agent:
Required for the Gateway Connector: deb.nodesource.com Required for the Gateway agent and the Gateway Connector: au1.bg.blackberry.com For more information, see KB 42221223173659. |
|
|
Europe Central |
Required for logging in to the Endpoint Defense console:
|
|
Required for Aurora Protect Desktop:
|
|
|
Required for Aurora Focus:
|
|
|
Required for the Gateway agent:
Required for the Gateway Connector: deb.nodesource.com Required for the Gateway agent and the Gateway Connector: eu1.bg.blackberry.com For more information, see KB 42221223173659. |
|
|
South America |
Required for logging in to the Endpoint Defense console:
|
|
Required for Aurora Protect Desktop:
|
|
|
Required for Aurora Focus:
|
|
|
Required for the Gateway agent:
Required for the Gateway Connector: deb.nodesource.com Required for the Gateway agent and the Gateway Connector: br1.bg.blackberry.com For more information, see KB 42221223173659. |
|
|
GovCloud |
Required for logging in to the Endpoint Defense console:
|
|
Required for Aurora Protect Desktop:
|
|
|
Required for Aurora Focus:
|
Aurora Protect Mobile app
- Aurora Protect Mobile cloud service:
- US: https://us1.mtd.blackberry.com
- JP: https://jp1.mtd.blackberry.com
- EU: https://eu1.mtd.blackberry.com
- AU: https://au1.mtd.blackberry.com
- SP: https://br1.mtd.blackberry.com
- Common services gateway:
- US: https://us1.cs.blackberry.com
- JP: https://jp1.cs.blackberry.com
- EU: https://eu1.cs.blackberry.com
- AU: https://au1.cs.blackberry.com
- SP: https://br1.cs.blackberry.com
- https://score.cylance.com
- https://idp.blackberry.com
- https://mobile.ues.blackberry.com