Frequently Asked Questions
Intelligence
 I have a firewall on the storage that holds my logs. Which IP or IP range Intelligence uses that I can allow in the firewall configuration?
I have a firewall on the storage that holds my logs. Which IP or IP range Intelligence uses that I can allow in the firewall configuration?
                                            You can allow these IP addresses based on your Data Center location (appears in Settings > Account Info > Data Center):
- 
                                                        For US Data Center: 34.197.175.194 
- 
                                                        For EU Data Center: 54.228.172.67 
- 
                                                        For Canada Data Center: 15.222.80.139 
- 
                                                        For Mumbai (Asia-Pacific) Data Center: 13.233.191.132 
- 
                                                        For Singapore (Asia-Pacific) Data Center: 54.169.243.71 
- 
                                                        For Sydney (Asia-Pacific) Data Center: 52.64.4.254 
 Can CloudGuard provide a cross-account traffic pattern analysis and view for two VPCs in different accounts?
Can CloudGuard provide a cross-account traffic pattern analysis and view for two VPCs in different accounts?
                                            Yes. These two accounts must be onboarded to CloudGuard, and the VPCs must have a peering connection. For more information on VPC peering, see AWS documentation.
CloudGuard Connectivity
 Which CloudGuard endpoints do I have to allow on my network?
Which CloudGuard endpoints do I have to allow on my network?
                                            The endpoints depend on your Data Center location (region). See below the URLs that you must allow in your environments for network traffic to transit your security perimeter.
 United States (US)
United States (US)
                                                    | M odule | Dome9 Portal URL | Infinity Portal URL | 
|---|---|---|
| Portal | https://secure.dome9.com | |
| API server | https://api.dome9.com https://api-cpx.dome9.com | https://api.us1.cgn.portal.checkpoint.com | 
| Image Assurance | https://rpm-serv.sg.iaas.checkpoint.com https://shiftleft.portal.checkpoint.com | |
| Image Scan | https://shiftleft-prod-bucket.sg.iaas.checkpoint.com For agent ver. 2.28.0 and lower: https://us-gw.sg.iaas.checkpoint.com | |
| Runtime Protection | https://storage.googleapis.com/cos-tools https://rep.checkpoint.com/file-rep/service/v2.0/query | |
| Container Registry | https://quay.io/checkpoint | |
| Code Security Spectral | https://spectral-us.dome9.com/ https://dl.spectralops.io/ | https://spectral-us.checkpoint.com/ | 
| Code Security Spectral OSS | https://eiffel.spectralops.io/ | |
| Intelligence | https://magellan.dome9.com | https://magellan.us1.cgn.portal.checkpoint.com | 
| https://validator-prod-k8s.s3.amazonaws.com | ||
| MSP | - | |
 Europe (EU)
Europe (EU)
                                                    | Module | Dome9 Portal URL | Infinity Portal URL | 
|---|---|---|
| Portal | ||
| API server | https://api-cpx.eu1.dome9.com https://api.eu1.dome9.com | https://api.eu1.cgn.portal.checkpoint.com | 
| Image Assurance | https://rpm-serv.sg.iaas.checkpoint.com https://shiftleft.portal.checkpoint.com/ | |
| Image Scan | https://shiftleft-prod-bucket.sg.iaas.checkpoint.com For agent ver. 2.28.0 and lower: https://eu-gw.sg.iaas.checkpoint.com | |
| Runtime Protection | https://storage.googleapis.com/cos-tools https://rep.checkpoint.com/file-rep/service/v2.0/query | |
| https://quay.io/checkpoint | ||
| Code Security Spectral | https://spectral.eu1.dome9.com/ https://dl.spectralops.io/ | https://spectral-eu.checkpoint.com/ | 
| Code Security Spectral OSS | https://eiffel.spectralops.io/ | |
| Intelligence | https://webserver.logic.eu1.dome9.com | https://webserver.logic.eu1.cgn.portal.checkpoint.com | 
| Kubernetes Intelligence | https://validator-prod-533924475734-k8s.s3.eu-west-1.amazonaws.com | |
| MSP | - | |
 Australia (AU)
Australia (AU)
                                                    | Module | Dome9 Portal URL | Infinity Portal URL | 
|---|---|---|
| Portal | https://secure.ap2.dome9.com | |
| API server | https://api.ap2.dome9.com https://api-cpx.ap2.dome9.com | https://api.ap2.cgn.portal.checkpoint.com | 
| Image Assurance | https://rpm-serv.sg.iaas.checkpoint.com https://shiftleft.portal.checkpoint.com/ | |
| Image Scan | https://shiftleft-prod-bucket.sg.iaas.checkpoint.com For agent ver. 2.28.0 and lower: https://au-gw.sg.iaas.checkpoint.com | |
| Runtime Protection | https://storage.googleapis.com/cos-tools https://rep.checkpoint.com/file-rep/service/v2.0/query | |
| Container Registry | https://quay.io/checkpoint | |
| Code Security Spectral | https://dl.spectralops.io/ | |
| Code Security Spectral OSS | https://eiffel.spectralops.io/ | |
| Intelligence | https://webserver.logic.ap2.dome9.com | https://webserver.logic.ap2.cgn.portal.checkpoint.com | 
| Kubernetes Intelligence | https://validator-prod-583664506098-k8s.s3.ap-southeast-2.amazonaws.com | |
| MSP | - | |
 Canada (CA)
Canada (CA)
                                                    | Module | Dome9 Portal URL | Infinity Portal URL | 
|---|---|---|
| Portal | https://secure.cace1.dome9.com | |
| API server | https://api.cace1.dome9.com https://api-cpx.cace1.dome9.com | https://api.cace1.cgn.portal.checkpoint.com | 
| Image Assurance | https://rpm-serv.sg.iaas.checkpoint.com https://shiftleft.portal.checkpoint.com/ | |
| Image Scan | https://shiftleft-prod-bucket.sg.iaas.checkpoint.com For agent ver. 2.28.0 and lower: https://ca-gw.sg.iaas.checkpoint.com | |
| Runtime Protection | https://storage.googleapis.com/cos-tools https://rep.checkpoint.com/file-rep/service/v2.0/query | |
| Container Registry | https://quay.io/checkpoint | |
| Code Security Spectral | https://dl.spectralops.io/ | |
| Code Security Spectral OSS | https://eiffel.spectralops.io/ | |
| Intelligence | https://webserver.logic.cace1.dome9.com | https://webserver.logic.cace1.cgn.portal.checkpoint.com | 
| Kubernetes Intelligence | https://validator-prod-052001227150-k8s.ca-central-1.amazonaws.com | |
| MSP | - | |
 India (IN)
India (IN)
                                                    | Module | Dome9 Portal URL | Infinity Portal URL | 
|---|---|---|
| Portal | https://secure.ap3.dome9.com | |
| API server | https://api.ap3.dome9.com https://api-cpx.ap3.dome9.com | https://api.ap3.cgn.portal.checkpoint.com | 
| Image Assurance | https://rpm-serv.sg.iaas.checkpoint.com https://shiftleft.portal.checkpoint.com/ | |
| Image Scan | https://shiftleft-prod-bucket.sg.iaas.checkpoint.com For agent ver. 2.28.0 and lower: https://in-gw.sg.iaas.checkpoint.com | |
| Runtime Protection | https://storage.googleapis.com/cos-tools https://rep.checkpoint.com/file-rep/service/v2.0/query | |
| Container Registry | https://quay.io/checkpoint | |
| Code Security Spectral | https://dl.spectralops.io/ | |
| Code Security Spectral OSS | https://eiffel.spectralops.io/ | |
| Intelligence | https://webserver.logic.ap3.dome9.com | https://webserver.logic.ap3.cgn.portal.checkpoint.com | 
| Kubernetes Intelligence | https://validator-prod-573281234161-k8s.s3.ap-south-1.amazonaws.com | |
| MSP | https://msp.ap3.dome9.com | - | 
 Singapore (SG)
Singapore (SG)	
                                                    | Module | Dome9 Portal URL | 
|---|---|
| CloudGuard Portal | |
| API server | https://api.ap1.dome9.com https://api-cpx.ap1.dome9.com | 
| Image Assurance | https://rpm-serv.sg.iaas.checkpoint.com https://shiftleft.portal.checkpoint.com/ | 
| Image Scan | https://shiftleft-prod-bucket.sg.iaas.checkpoint.com For agent ver. 2.28.0 and lower: https://sg-gw.sg.iaas.checkpoint.com | 
| Runtime Protection | https://storage.googleapis.com/cos-tools https://rep.checkpoint.com/file-rep/service/v2.0/query | 
| Container Registry | https://quay.io/checkpoint | 
| Code Security Spectral | https://dl.spectralops.io/ | 
| Code Security Spectral OSS | https://eiffel.spectralops.io/ | 
| Intelligence | https://webserver.logic.ap1.dome9.com | 
| Kubernetes Intelligence | https://validator-prod-155213570047-k8s.s3.ap-southeast-1.amazonaws.com | 
| MSP | 
