topic CPUSE tries to access unkown non checkpoint or akamai ip-addresses in Firewall and Security Management

CPUSE tries to access unkown non checkpoint or akamai ip-addresses

MichaelD — Wed, 17 Jun 2020 14:10:41 GMT

In FW Log, when checking new updates in CPUSE (Management or Gateways), access to 104.18.20.226 and 104.18.21.226 to http(80) is blocked. These ip addresses do not belong to checkpoint or akamaitechnologie ip-ranges and are not mentioned in

sk83520 (How to verify that Security Gateway and/or Security Management Server can access Check Point servers?)

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk83520

Are these ip addresses necessary for CPUSE Updates??

Regards,

Michael

Re: CPUSE tries to access unkown non checkpoint or akamai ip-addresses

mssmith_sloco — Fri, 23 Jul 2021 22:59:49 GMT

We are seeing the same thing. Any thoughts?

Re: CPUSE tries to access unkown non checkpoint or akamai ip-addresses

IdanC — Wed, 28 Jul 2021 17:44:29 GMT

@MichaelD @mssmith_sloco

After checking, These IPs are related to GlobalSign. We are using GlobalSign certificate on updates.checkpoint.com (it's the CRL check during the SSL handshake).