Whitelisting URLs or IPs for Agent Communication

Modified on Fri, Nov 10, 2023 at 6:00 AM

Whitelist below Cloudflare R2 URL OR IP ranges for agent communication. These are applicable for all cloud regions.

https://45ee58f3bc4d04c0e1ae971fde066899.r2.cloudflarestorage.com/

Below are the IP ranges:

173.245.48.0/20
103.21.244.0/22
103.22.200.0/22
103.31.4.0/22
141.101.64.0/18
108.162.192.0/18
190.93.240.0/20
188.114.96.0/20
197.234.240.0/22
198.41.128.0/17
162.158.0.0/15
104.16.0.0/13
104.24.0.0/14
172.64.0.0/13
131.0.72.0/22

For the CyberCNS Agent Communication, whitelist the URLs and IPs below specific to the respective SaaS-hosted regions.

US-EAST-2 (If your domain is hosted in the US-EAST-2 region, whitelist the below URLs)

Whitelist the below URLs for agent Communication with CyberCNS US-EAST-2 region.
https://configuration.mycybercns.com
https://portaluseast2.mycybercns.com/*
https://s3.us-east-2.amazonaws.com
https://kinesis.us-east-2.amazonaws.com
https://kinesis-fips.us-east-2.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.com
If you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for CyberCNS US-EAST-2 region.

S3 Default IP ranges US-EAST-2
52.219.212.0/22
52.219.143.0/24
52.219.141.0/24
18.34.72.0/21
3.5.128.0/22
52.219.142.0/24
52.219.96.0/20
3.5.132.0/23
52.219.232.0/22
18.34.252.0/22
52.219.176.0/22
16.12.60.0/22
52.219.224.0/22
52.219.80.0/20
52.219.228.0/22
3.141.102.208/28
3.141.102.224/28

S3 URLs US-EAST-2
configuration.mycybercns.com
34.194.189.151
3.233.131.44
52.22.169.69
54.84.20.167
portaluseast2.mycybercns.com
18.155.99.86
18.155.99.108
18.155.99.60
18.155.99.75
agentv3.myconnectsecure.com
104.26.12.175
104.26.13.175
172.67.69.215
portal.mycybercns.com
18.155.99.86

US-WEST-2(if your domain is hosted in US-WEST-2 region white list the below URLs)

Whitelist the below URLs for agent Communication with CyberCNS US-WEST-2 region.

https://configuration.mycybercns.com
https://portaluswest2.mycybercns.com/*
https://s3.us-west-2.amazonaws.com
https://kinesis.us-west-2.amazonaws.com
https://kinesis-fips.us-west-2.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.com

If you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for US-WEST-2 region.

S3 Default IP ranges US-WEST-2

3.5.76.0/22

18.34.244.0/22

18.34.48.0/20

3.5.80.0/21

52.218.128.0/17

52.92.128.0/17

35.80.36.208/28

35.80.36.224/28

S3 URLs US-WEST-2
configuration.mycybercns.com
34.194.189.151
3.233.131.44
52.22.169.69
54.84.20.167
portaluswest2.mycybercns.com
13.249.221.15
13.249.221.104
13.249.221.17
13.249.221.107
agentv3.myconnectsecure.com
104.26.12.175
104.26.13.175
172.67.69.215
portal.mycybercns.com
18.155.99.86

AP-SOUTHEAST-2(if your domain is hosted in the AP-SOUTHEAST-2 region white list the below URLs)

Whitelist the below URLs for agent Communication with CyberCNS AP-SOUTHEAST-2 region.

https://configuration.mycybercns.com
https://portalapsoutheast2.mycybercns.com/*
https://s3.ap-southeast-2.amazonaws.com
https://kinesis.ap-southeast-2.amazonaws.com
https://kinesis-fips.ap-southeast-2.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.com

If you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for the AP-SOUTHEAST-2 region.

S3 Default IP Range ApSouthEast-2

52.95.128.0/21

3.5.164.0/22

3.5.168.0/23

3.26.88.0/28

3.26.88.16/28

S3 URLs AP-SOUTHEAST-2
configuration.mycybercns.com
34.194.189.151
3.233.131.44
54.84.20.167
52.22.169.69
portalapsoutheast2.mycybercns.com
18.161.216.57
18.161.216.77
18.161.216.17
18.161.216.54
agentv3.myconnectsecure.com
104.26.12.175
104.26.13.175
172.67.69.215
portal.mycybercns.com
18.155.99.86

EU-WSET-2(if your domain is hosted in the EU-WSET-2 region white list the below URLs)

Whitelist the below URLs for agent Communication with the CyberCNS EU-WSET-2 region.

https://configuration.mycybercns.com
https://portaleuwest2.mycybercns.com/*
https://s3.eu-west-2.amazonaws.com
https://kinesis.eu-west-2.amazonaws.com
https://kinesis-fips.eu-west-2.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.com

IIf you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for EU-WSET-2 region.

S3 Default IP Ranges Eu-West-2

52.95.150.0/24

16.12.15.0/24

16.12.16.0/23

52.95.148.0/23

52.219.219.0/24

52.95.144.0/24

52.95.142.0/23

52.95.191.0/24

3.5.244.0/22

18.168.37.160/28

18.168.37.176/28

S3 URLs EU-WSET-2
configuration.mycybercns.com
34.194.189.151
3.233.131.44
52.22.169.69
54.84.20.167
portaleuwest2.mycybercns.com
18.155.99.78
18.155.99.36
18.155.99.37
18.155.99.21
agentv3.myconnectsecure.com
104.26.12.175
104.26.13.175
172.67.69.215
portal.mycybercns.com
18.155.99.86

EU-CENTRAL-1(if your domain is hosted in the EU-CENTRAL-1 region white list the below URLs)

https://configuration.mycybercns.com
https://portaleucentral2.mycybercns.com/*
https://s3.eu-central-1.amazonaws.com
https://kinesis.eu-central-1.amazonaws.com
https://kinesis-fips.eu-central-1.amazonaws.com
https://cybercnsagentupdates.s3.amazonaws.com
https://agentv3.myconnectsecure.com

If you would like to whitelist based on the IP address instead of the domain name, please use the following S3 Default IP ranges for EU-CENTRAL-1 region.

S3 Default Ip ranges Eu-Central-1

52.219.170.0/23

52.219.168.0/24

16.12.32.0/22

16.12.24.0/21

3.5.136.0/22

52.219.72.0/22

52.219.211.0/24

52.219.210.0/24

52.219.218.0/24

52.219.44.0/22

52.219.169.0/24

52.219.140.0/24

52.219.208.0/23

3.5.134.0/23

3.65.246.0/28

3.65.246.16/28

S3 URLs EU-CENTRAL-1
configuration.mycybercns.com
34.194.189.151
3.233.131.44
54.84.20.167
52.22.169.69
portaleucentral1.mycybercns.com
18.161.216.50
18.161.216.128
18.161.216.46
18.161.216.40
agentv3.myconnectsecure.com
104.26.13.175
104.26.12.175
172.67.69.215
portal.mycybercns.com
18.155.99.86

Patching using lightweight agent

Please whitelist https://chocolateyrepo.mycybercns.com/chocolatey so that the lightweight agent responsible for patching should be able to communicate with the CyberCNS Chocolatey server for successful patching.