Frequently Asked Questions

Intelligence

You can allow these IP addresses based on your Data Center location (appears in Settings > Account Info > Data Center):

  • For US Data Center: 34.197.175.194

  • For EU Data Center: 54.228.172.67

  • For Canada Data Center: 15.222.80.139

  • For Mumbai (Asia-Pacific) Data Center: 13.233.191.132

  • For Singapore (Asia-Pacific) Data Center: 54.169.243.71

  • For Sydney (Asia-Pacific) Data Center: 52.64.4.254

Yes. These two accounts must be onboarded to CloudGuard, and the VPCs must have a peering connection. For more information on VPC peering, see AWS documentation.

CloudGuard Connectivity

The endpoints depend on your Data Center location (region). See below the URLs that you must allow in your environments for network traffic to transit your security perimeter.

Module

 

 URL

Dome9 Portal

CloudGuard portal

https://secure.dome9.com

API server

https://api.dome9.com

https://api-cpx.dome9.com

Image Assurance

https://rpm-serv.sg.iaas.checkpoint.com

https://shiftleft.portal.checkpoint.com

Image Scan

https://shiftleft-prod-bucket.sg.iaas.checkpoint.com

For agent ver. 2.28.0 and lower:

https://us-gw.sg.iaas.checkpoint.com

Runtime Protection

https://storage.googleapis.com/cos-tools

https://rep.checkpoint.com/file-rep/service/v2.0/query

Container RegistryClosed A collection of repositories used to store and access container images.

https://quay.io/checkpoint

Code Security Spectral

https://spectral-us.dome9.com/

https://dl.spectralops.io/

Code Security Spectral OSS

https://eiffel.spectralops.io/

Intelligence

https://magellan.dome9.com

KubernetesClosed Kubernetes, often abbreviated as “K8s”, orchestrates containerized applications to run on a cluster of hosts. Intelligence

https://validator-prod-k8s.s3.amazonaws.com

MSP

https://msp.dome9.com

Module
URL

Dome9 Portal

CloudGuard portal

https://secure.eu1.dome9.com

API server

https://api.eu1.dome9.com

https://api-cpx.eu1.dome9.com

Image Assurance

https://rpm-serv.sg.iaas.checkpoint.com

https://shiftleft.portal.checkpoint.com/

Image Scan

https://shiftleft-prod-bucket.sg.iaas.checkpoint.com

For agent ver. 2.28.0 and lower:

https://eu-gw.sg.iaas.checkpoint.com

Runtime Protection

https://storage.googleapis.com/cos-tools

https://rep.checkpoint.com/file-rep/service/v2.0/query

ContainerClosed A lightweight and portable executable image that contains software and all of its dependencies. Containers decouple applications from underlying host infrastructure to make deployment easier in different cloud or OS environments, and for easier scaling. Registry

https://quay.io/checkpoint

Code Security Spectral

https://spectral.eu1.dome9.com/

https://dl.spectralops.io/

Code Security Spectral OSS

https://eiffel.spectralops.io/

Intelligence

https://webserver.logic.eu1.dome9.com

Kubernetes Intelligence

https://validator-prod-533924475734-k8s.s3.eu-west-1.amazonaws.com

MSP

https://msp.eu1.dome9.com

Module
URL

Dome9 Portal

CloudGuard portal

https://secure.ap2.dome9.com

API server

https://api.ap2.dome9.com

https://api-cpx.ap2.dome9.com

Image Assurance

https://rpm-serv.sg.iaas.checkpoint.com

https://shiftleft.portal.checkpoint.com/

Image Scan

https://shiftleft-prod-bucket.sg.iaas.checkpoint.com

For agent ver. 2.28.0 and lower:

https://au-gw.sg.iaas.checkpoint.com

Runtime Protection

https://storage.googleapis.com/cos-tools

https://rep.checkpoint.com/file-rep/service/v2.0/query

Container Registry

https://quay.io/checkpoint

Code Security Spectral

https://dl.spectralops.io/

Code Security Spectral OSS

https://eiffel.spectralops.io/

Intelligence

https://webserver.logic.ap2.dome9.com

Kubernetes Intelligence

https://validator-prod-583664506098-k8s.s3.ap-southeast-2.amazonaws.com

MSP

https://msp.ap2.dome9.com

Module
URL

Dome9 Portal

CloudGuard portal

https://secure.cace1.dome9.com

API server

https://api.cace1.dome9.com

https://api-cpx.cace1.dome9.com

Image Assurance

https://rpm-serv.sg.iaas.checkpoint.com

https://shiftleft.portal.checkpoint.com/

Image Scan

https://shiftleft-prod-bucket.sg.iaas.checkpoint.com

For agent ver. 2.28.0 and lower:

https://ca-gw.sg.iaas.checkpoint.com

Runtime Protection

https://storage.googleapis.com/cos-tools

https://rep.checkpoint.com/file-rep/service/v2.0/query

Container Registry

https://quay.io/checkpoint

Code Security Spectral

https://dl.spectralops.io/

Code Security Spectral OSS

https://eiffel.spectralops.io/

Intelligence

https://webserver.logic.cace1.dome9.com

Kubernetes Intelligence

https://validator-prod-052001227150-k8s.ca-central-1.amazonaws.com

MSP

https://msp.cace1.dome9.com

Module
URL

Dome9 Portal

CloudGuard portal

https://secure.ap3.dome9.com

API server

https://api.ap3.dome9.com

https://api-cpx.ap3.dome9.com

Image Assurance

https://rpm-serv.sg.iaas.checkpoint.com

https://shiftleft.portal.checkpoint.com/

Image Scan

https://shiftleft-prod-bucket.sg.iaas.checkpoint.com

For agent ver. 2.28.0 and lower:

https://in-gw.sg.iaas.checkpoint.com

Runtime Protection

https://storage.googleapis.com/cos-tools

https://rep.checkpoint.com/file-rep/service/v2.0/query

Container Registry

https://quay.io/checkpoint

Code Security Spectral

https://dl.spectralops.io/

Code Security Spectral OSS

https://eiffel.spectralops.io/

Intelligence

https://webserver.logic.ap3.dome9.com

Kubernetes Intelligence

https://validator-prod-573281234161-k8s.s3.ap-south-1.amazonaws.com

MSP

https://msp.ap3.dome9.com

- 
Module URL (Dome9 Portal only)

CloudGuard portal

https://secure.ap1.dome9.com

API server

https://api.ap1.dome9.com

https://api-cpx.ap1.dome9.com

Image Assurance

https://rpm-serv.sg.iaas.checkpoint.com

https://shiftleft.portal.checkpoint.com/

Image Scan

https://shiftleft-prod-bucket.sg.iaas.checkpoint.com

For agent ver. 2.28.0 and lower:

https://sg-gw.sg.iaas.checkpoint.com

Runtime Protection

https://storage.googleapis.com/cos-tools

https://rep.checkpoint.com/file-rep/service/v2.0/query

Container Registry

https://quay.io/checkpoint

Code Security Spectral

https://dl.spectralops.io/

Code Security Spectral OSS

https://eiffel.spectralops.io/

Intelligence

https://webserver.logic.ap1.dome9.com

Kubernetes Intelligence

https://validator-prod-155213570047-k8s.s3.ap-southeast-1.amazonaws.com

MSP

https://msp.ap1.dome9.com