topic Re: Problem with AutoCad licencing servers in Firewall and Security Management

Problem with AutoCad licencing servers

rajko — Thu, 25 Jul 2019 13:02:45 GMT

Hello,

This is my first post and im not quite sure that right category.

Like you can read in subject, I have problem with AutoCad licencing servers, very often they change IPs so its complicated to add new addresses again and again. I checked logs and i see that all licencing informations come from:

something.amazonaws.com

So I added rule which looks like this:

Is it right and if someone have better solution it will mean a lot to me!

Thank you in advance. 🙂

Re: Problem with AutoCad licencing servers

PhoneBoy — Fri, 26 Jul 2019 02:14:23 GMT

Do the licensing servers have a specific DNS name?
In this case, you can create an FQDN Domain object of the name .license.autocad.com (or whatever the name Is).
Note this requires R80.10+ gateways.

Re: Problem with AutoCad licencing servers

rajko — Fri, 26 Jul 2019 06:01:50 GMT

Thank you for reply.

I added like this, because it checking for licence from something.amazonaws.com i guess like this is okay.

Does this avoid https inspection for selected domain because i'm pretty sure that is a problem.

Re: Problem with AutoCad licencing servers

rajko — Mon, 05 Aug 2019 11:49:19 GMT

Because this problem is not yet solved, I found out what caused a problem with Autocad contact with licensing servers. I found out that HTTPS inspection keeps blocking AutoCAD contact with licensing servers, after the whole research I get Signature tool but not sure how to configure it to bypass URL filtering for the list that you can see below:

https://knowledge.autodesk.com/search-result/caas/sfdcarticles/sfdcarticles/What-URLs-protocols-should-be-accessible-for-Desktop-Subscription-to-work.html

Thank you in advance.

Re: Problem with AutoCad licencing servers

PhoneBoy — Mon, 05 Aug 2019 19:54:12 GMT

You would not necessarily be able to use the signature tool to create a signature for bypassing HTTPS Inspection as I believe only URL Filtering categories can be used there.
I believe you can create a simple list of hostnames as a Custom App inside SmartConsole and assign it to a specific URLF category that you exclude.
You can exclude the specific IPs instead of or in addition to, but those are likely to change.