IP ranges used by cylance

it is recommended users allow *.cylance.com over port 443 to allow communication between the CylancePROTECT Agents and the CylancePROTECT Console.

The CylancePROTECT Agents report to and are managed by the CylancePROTECT Console (cloud-based). The CylancePROTECT Console is hosted by Amazon Web Services (AWS). Due to the nature of AWS and frequently changing IP addresses, it is not possible to keep this KB article up-to-date.

Instead of IP addresses, it is recommended users allow *.cylance.com over port 443 to allow communication between the CylancePROTECT Agents and the CylancePROTECT Console. Or users can allow the Cylance URLs listed below to allow communication and ensure access to the CylancePROTECT Console. 

You can also refer to IP Ranges used by Amazon Web services.

Note: The Syslog server IP addresses are static to ensure communication with your Syslog servers. The other IP addresses are based on Amazon's AWS. See this KB article for a list of Syslog IP addresses.
 

North America

Required for Agent Communication and Console Navigation

The below domains are required to allow the Agent to communicate correctly to the Console, as well as to access and navigate the Console successfully.

·         login.cylance.com

·         data.cylance.com

·         protect.cylance.com

·         update.cylance.com

·         api.cylance.com

·         download.cylance.com

Additional Domains Required for Console Navigation

The below domains are also required to navigate the Console successfully. They are not required for the CylancePROTECT Agent to communicate to the Console successfully. 

·         cdn.cylance.com

·         venueapi.cylance.com


For Syslog server IP addresses, see our knowledge base article here. 

 

Asia-Pacific Northeast

Required for Agent Communication and Console Navigation

The below domains are required to allow the Agent to communicate correctly to the Console, as well as to access and navigate the Console successfully.

·         login-apne1.cylance.com

·         data-apne1.cylance.com

·         protect-apne1.cylance.com

·         update-apne1.cylance.com

·         api.cylance.com

·         download.cylance.com

Additional Domains Required for Console Navigation

The below domains are also required to navigate the Console successfully. They are not required for the CylancePROTECT Agent to communicate to the Console successfully. 

·         cdn.cylance.com

·         venueapi-apne1.cylance.com


For Syslog server IP addresses, see our knowledge base article here. 
 

Asia-Pacific Southeast (including Australia)

Required for Agent Communication and Console Navigation

The below domains are required to allow the Agent to communicate correctly to the Console, as well as to access and navigate the Console successfully.

·         login-au.cylance.com

·         data-au.cylance.com

·         protect-au.cylance.com

·         update-au.cylance.com

·         api.cylance.com

·         download.cylance.com

Additional Domains Required for Console Navigation

The below domains are also required to navigate the Console successfully. They are not required for the CylancePROTECT Agent to communicate to the Console successfully. 

·         cdn.cylance.com

·         venueapi-au.cylance.com


For Syslog server IP addresses, see our knowledge base article here. 


Europe Central

Required for Agent Communication and Console Navigation

The below domains are required to allow the Agent to communicate correctly to the Console, as well as to access and navigate the Console successfully.

·         login-euc1.cylance.com

·         data-euc1.cylance.com

·         protect-euc1.cylance.com

·         update-euc1.cylance.com

·         api.cylance.com

·         download.cylance.com

Additional Domains Required for Console Navigation

The below domains are also required to navigate the Console successfully. They are not required for the CylancePROTECT Agent to communicate to the Console successfully. 

·         cdn.cylance.com

·         venueapi-euc1.cylance.com


For Syslog server IP addresses, see our knowledge base article here. 


South America East

Required for Agent Communication and Console Navigation

The below domains are required to allow the Agent to communicate correctly to the Console, as well as to access and navigate the Console successfully.

·         login-sae1.cylance.com

·         data-sae1.cylance.com

·         protect-sae1.cylance.com

·         update-sae1.cylance.com

·         api.cylance.com

·         download.cylance.com

Additional Domains Required for Console Navigation

The below domains are also required to navigate the Console successfully. They are not required for the CylancePROTECT Agent to communicate to the Console successfully. 

·         cdn.cylance.com

·         venueapi-sae1.cylance.com


Note: api2.cylance.com is a deprecated IP address, and as such was removed from the required list of IP addresses above.