Harmony Endpoint Client Connectivity Requirements (Cloud) - sk116590

[lrossi89]

Hello everybody ,
Is there a file available by chance for an exportable version of the domains so that it can be imported into other technologies?

For example a format:
- Json or XLS?

Harmony Endpoint 

[Chris_Atkinson]

Take a look at this discussion:

https://community.checkpoint.com/t5/Security-Gateways/Updateable-objects-for-Check-Point-Cloud-Servi...

Review the contents of the following:

https://secureupdates.checkpoint.com/cp_services/V1_0_0/gw/cp_services_uo

[lrossi89]

The domains do not seem to be updated, for example:

*.deploy.static.akamaitechnologies.com

Is not present

Is there any other reference link for the collection of exportable domains?

[PhoneBoy]

This is the list of domains that we provide to the gateways and document in various SKs.
There isn't a different list.
If you look up each of the domains, you'll find that the IPs for several of them resolve to Akamai IPs.
Those IPs may "reverse resolve" to *.deploy.static.akamaitechnologies.com, which is what I assume you're seeing in your logs.

[lrossi89]

I agree, customers in general I wonder if there is an always updated list that can download (XLs or json) without making the parsing of the page
For example, those who have a pfsense ecc...ecc or a internal proxy

So only the SKs are available, correct?

[PhoneBoy · Accepted solution]

Right, and this URL has the precise file that our gateways download for the "Check Point Services" Updatable Object: https://secureupdates.checkpoint.com/cp_services/V1_0_0/gw/cp_services_uo
The URL returns a simple list of domains that should cover everything in sk116590 and sk83520 (either directly or via a CNAME that refers to the mentioned URLs).

If you find through actual testing (versus visual inspection) something is missing here, let us know.