Cylance Endpoint Security network requirements Skip Navigation

Cylance Endpoint Security
network requirements

Cylance Endpoint Security
agents

Port 443 (HTTPS) must be open for the
Cylance Endpoint Security
desktop agents to communicate with the management console.
The agents communicate over secure websockets (WSS) and must be able to establish this connection directly. Configure your organization's network to allow connections to the following domains.
  • The management console is hosted by AWS and does not have fixed IP addresses. You can allow HTTPS traffic to *.cylance.com. For the cylance-optics-files-use1.s3.amazonaws.com host (and similar hosts for other regions), it is recommended to allow that specific host. It is not recommended to allow *.amazonaws.com because it can open your network to other hosts.
  • Please note that the domain api2.cylance.com is deprecated, but is kept open to support older
    CylancePROTECT Desktop
    agents. api2.cylance.com directs to the same destination as api.cylance.com for the purpose of threat analysis and risk scoring.
Item
Description
North America
Required for logging in to the
Cylance
console:
  • login.cylance.com
  • idp.blackberry.com
Required for
CylancePROTECT Desktop
and
CylanceOPTICS
:
  • cement.cylance.com
Required for
CylancePROTECT Desktop
:
  • data.cylance.com
  • protect.cylance.com
  • update.cylance.com
  • api.cylance.com
  • download.cylance.com
  • cdn.cylance.com
  • venueapi.cylance.com
Required for
CylanceOPTICS
:
  • cylance-optics-files-use1.s3.amazonaws.com
  • opticspolicy.cylance.com
  • content.cylance.com
  • rrws-use1.cylance.com
  • collector.cylance.com
Required for
CylancePERSONA Desktop
:
  • cement2.cylance.com
  • auth.cylance.com
Required for the
CylanceGATEWAY
agent:
  • idp.blackberry.com
  • quip.webapps.blackberry.com
  • us1.cs.blackberry.com
Required for the
CylanceGATEWAY Connector
:
  • deb.nodesource.com
Required for the
CylanceGATEWAY
agent and the
CylanceGATEWAY Connector
:
  • us1.bg.blackberry.com
For more information, see KB79017.
Asia-Pacific Northeast
Required for logging in to the
Cylance
console:
  • login-apne1.cylance.com
  • idp.blackberry.com
Required for
CylancePROTECT Desktop
and
CylanceOPTICS
:
  • cement-apne1.cylance.com
Required for
CylancePROTECT Desktop
:
  • data-apne1.cylance.com
  • protect-apne1.cylance.com
  • update-apne1.cylance.com
  • api.cylance.com
  • download.cylance.com
  • cdn.cylance.com
  • venueapi-apne1.cylance.com
Required for
CylanceOPTICS
:
  • cylance-optics-files-apne1.s3.amazonaws.com
  • opticspolicy-apne1.cylance.com
  • content-apne1.cylance.com
  • rrws-apne1.cylance.com
  • collector-apne1.cylance.com
Required for
CylancePERSONA Desktop
:
  • cement2-apne1.cylance.com
  • auth-apne1.cylance.com
Required for the
CylanceGATEWAY
agent:
  • idp.blackberry.com
  • quip.webapps.blackberry.com
  • jp1.cs.blackberry.com
Required for the
CylanceGATEWAY Connector
:
  • deb.nodesource.com
Required for the
CylanceGATEWAY
agent and the
CylanceGATEWAY Connector
:
  • jp1.bg.blackberry.com
For more information, see KB79017.
Asia-Pacific Southeast
Required for logging in to the
Cylance
console:
  • login-au.cylance.com
  • idp.blackberry.com
Required for
CylancePROTECT Desktop
and
CylanceOPTICS
:
  • cement-au.cylance.com
  • cement-apse2.cylance.com
Required for
CylancePROTECT Desktop
:
  • data-au.cylance.com
  • protect-au.cylance.com
  • update-au.cylance.com
  • api.cylance.com
  • download.cylance.com
  • cdn.cylance.com
  • venueapi-au.cylance.com
Required for
CylanceOPTICS
:
  • cylance-optics-files-apse2.s3.amazonaws.com
  • opticspolicy-au.cylance.com
  • content-apse2.cylance.com
  • rrws-apse2.cylance.com
  • collector-apse2.cylance.com
Required for
CylancePERSONA Desktop
:
  • cement2-apse2.cylance.com
  • auth-apse2.cylance.com
Required for the
CylanceGATEWAY
agent:
  • idp.blackberry.com
  • quip.webapps.blackberry.com
  • au1.cs.blackberry.com
Required for the
CylanceGATEWAY Connector
:
  • deb.nodesource.com
Required for the
CylanceGATEWAY
agent and the
CylanceGATEWAY Connector
:
  • au1.bg.blackberry.com
For more information, see KB79017.
Europe Central
Required for logging in to the
Cylance
console:
  • login-euc1.cylance.com
  • idp.blackberry.com
Required for
CylancePROTECT Desktop
and
CylanceOPTICS
:
  • cement-euc1.cylance.com
Required for
CylancePROTECT Desktop
:
  • data-euc1.cylance.com
  • protect-euc1.cylance.com
  • update-euc1.cylance.com
  • api.cylance.com
  • download.cylance.com
  • cdn.cylance.com
  • venueapi-euc1.cylance.com
Required for
CylanceOPTICS
:
  • cylance-optics-files-euc1.s3.amazonaws.com
  • opticspolicy-euc1.cylance.com
  • content-euc1.cylance.com
  • rrws-euc1.cylance.com
  • collector-euc1.cylance.com
Required for
CylancePERSONA Desktop
:
  • cement2-euc1.cylance.com
  • auth-euc1.cylance.com
Required for the
CylanceGATEWAY
agent:
  • idp.blackberry.com
  • quip.webapps.blackberry.com
  • eu1.cs.blackberry.com
Required for the
CylanceGATEWAY Connector
:
  • deb.nodesource.com
Required for the
CylanceGATEWAY
agent and the
CylanceGATEWAY Connector
:
  • eu1.bg.blackberry.com
For more information, see KB79017.
South America
Required for logging in to the
Cylance
console:
  • login-sae1.cylance.com
  • idp.blackberry.com
Required for
CylancePROTECT Desktop
and
CylanceOPTICS
:
  • cement-sae1.cylance.com
Required for
CylancePROTECT Desktop
:
  • data-sae1.cylance.com
  • protect-sae1.cylance.com
  • update-sae1.cylance.com
  • api.cylance.com
  • download.cylance.com
  • cdn.cylance.com
  • venueapi-sae1.cylance.com
Required for
CylanceOPTICS
:
  • cylance-optics-files-sae1.s3.amazonaws.com
  • opticspolicy-sae1.cylance.com
  • content-sae1.cylance.com
  • rrws-sae1.cylance.com
  • collector-sae1.cylance.com
Required for
CylancePERSONA Desktop
:
  • cement2-sae1.cylance.com
  • auth-sae1.cylance.com
Required for the
CylanceGATEWAY
agent:
  • idp.blackberry.com
  • quip.webapps.blackberry.com
  • br1.cs.blackberry.com
Required for the
CylanceGATEWAY Connector
:
  • deb.nodesource.com
Required for the
CylanceGATEWAY
agent and the
CylanceGATEWAY Connector
:
  • br1.bg.blackberry.com
For more information, see KB79017.
GovCloud
Required for logging in to the
Cylance
console:
  • login.us.cylance.com
  • idp.blackberry.com
Required for
CylancePROTECT Desktop
and
CylanceOPTICS
:
  • cement.us.cylance.com
Required for
CylancePROTECT Desktop
:
  • data.us.cylance.com
  • protect.us.cylance.com
  • update.us.cylance.com
  • api.us.cylance.com
  • download.cylance.com
  • download.us.cylance.com
  • venueapi.us.cylance.com
Required for
CylanceOPTICS
:
  • cylance-optics-files.us.s3.amazonaws.com
  • opticspolicy.us.cylance.com
  • rrws.us.cylance.com
  • collector.us.cylance.com

CylancePROTECT Mobile
app

The
CylancePROTECT Mobile
app requires a secure, direct connection to the following URLs to communicate with the
CylancePROTECT Mobile
cloud services. If devices are connected to your organization's
Wi-Fi
network, your network configuration must allow connections to:
  • CylancePROTECT Mobile
    cloud service:
    • US: https://us1.mtd.blackberry.com
    • JP: https://jp1.mtd.blackberry.com
    • EU: https://eu1.mtd.blackberry.com
    • AU: https://au1.mtd.blackberry.com
    • SP: https://br1.mtd.blackberry.com
  • Common services gateway:
    • US: https://us1.cs.blackberry.com
    • JP: https://jp1.cs.blackberry.com
    • EU: https://eu1.cs.blackberry.com
    • AU: https://au1.cs.blackberry.com
    • SP: https://br1.cs.blackberry.com
  • https://score.cylance.com
  • https://idp.blackberry.com
  • https://mobile.ues.blackberry.com