topic Re: Harmony Endpoint Client Connectivity Requirements (Cloud) - sk116590 in Endpoint

Harmony Endpoint Client Connectivity Requirements (Cloud) - sk116590

lrossi89 — Mon, 16 Jan 2023 08:38:58 GMT

Hello everybody ,
Is there a file available by chance for an exportable version of the domains so that it can be imported into other technologies?

For example a format:
- Json or XLS?

Re: Harmony Endpoint Client Connectivity Requirements (Cloud) - sk116590

Chris_Atkinson — Mon, 16 Jan 2023 11:30:34 GMT

Take a look at this discussion:

https://community.checkpoint.com/t5/Security-Gateways/Updateable-objects-for-Check-Point-Cloud-Services/td-p/117791

Review the contents of the following:

https://secureupdates.checkpoint.com/cp_services/V1_0_0/gw/cp_services_uo

Re: Harmony Endpoint Client Connectivity Requirements (Cloud) - sk116590

lrossi89 — Wed, 18 Jan 2023 14:40:33 GMT

The domains do not seem to be updated, for example:

*.deploy.static.akamaitechnologies.com

Is not present

Is there any other reference link for the collection of exportable domains?

Re: Harmony Endpoint Client Connectivity Requirements (Cloud) - sk116590

PhoneBoy — Wed, 18 Jan 2023 17:33:55 GMT

This is the list of domains that we provide to the gateways and document in various SKs.
There isn't a different list.
If you look up each of the domains, you'll find that the IPs for several of them resolve to Akamai IPs.
Those IPs may "reverse resolve" to *.deploy.static.akamaitechnologies.com, which is what I assume you're seeing in your logs.

Re: Harmony Endpoint Client Connectivity Requirements (Cloud) - sk116590

lrossi89 — Thu, 19 Jan 2023 08:59:23 GMT

I agree, customers in general I wonder if there is an always updated list that can download (XLs or json) without making the parsing of the page
For example, those who have a pfsense ecc...ecc or a internal proxy

So only the SKs are available, correct?

Re: Harmony Endpoint Client Connectivity Requirements (Cloud) - sk116590

PhoneBoy — Thu, 19 Jan 2023 15:43:28 GMT

Right, and this URL has the precise file that our gateways download for the "Check Point Services" Updatable Object: https://secureupdates.checkpoint.com/cp_services/V1_0_0/gw/cp_services_uo
The URL returns a simple list of domains that should cover everything in sk116590 and sk83520 (either directly or via a CNAME that refers to the mentioned URLs).

If you find through actual testing (versus visual inspection) something is missing here, let us know.