CPUSE tries to access unkown non checkpoint or akamai ip-addresses

[MichaelD]

In FW Log, when checking new updates in CPUSE (Management or Gateways), access to 104.18.20.226 and 104.18.21.226 to http(80) is blocked. These ip addresses do not belong to checkpoint or akamaitechnologie ip-ranges and are not mentioned in

sk83520 (How to verify that Security Gateway and/or Security Management Server can access Check Point servers?)

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Are these ip addresses necessary for CPUSE Updates??

Regards,

Michael

[mssmith_sloco]

We are seeing the same thing. Any thoughts? 

[IdanC · Accepted solution]

@MichaelD @mssmith_sloco 

After checking, These IPs are related to GlobalSign. We are using GlobalSign certificate on updates.checkpoint.com (it's the CRL check during the SSL handshake).