Secure Access DNS and Web – Client Configuration Services
Required by applications or devices connecting to the Secure Access DNS-layer security, including the Secure Access Active Director (AD) Connector and Cisco Secure Client deployments with the Umbrella Roaming Security module (DNS-layer security and Web).
We recommend that you allow all traffic on port 443 over TCP for the Secure Access Client Configuration services.
| Domains | Port/Protocol | Description |
|---|---|---|
| api.opendns.com | 443/TCP | Configuration |
The Cisco Secure Client Umbrella Roaming Security module uses HTTP (80/TCP) and HTTPS (443/TCP) to communicate with Secure Access for the following uses:
- Initial registration of the Cisco Secure Client Umbrella Roaming Security module upon installation.
- Checking for new versions of the Cisco Secure Client Umbrella Roaming Security module.
- Reporting the status of Cisco Secure Client Umbrella Roaming Security module to Secure Access.
- Checking for new internal domains.
| IP Ranges | Ports | Protocol |
|---|---|---|
| 67.215.71.201 | 80/443 | TCP |
| 67.215.92.210 | 80/443 | TCP |
| 146.112.255.101 | 80/443 | TCP |
| 146.112.255.152/29 | 80/443 | TCP |
| 2620:0:cc1:115::210 (IPv6) | 80/443 | TCP |
| 2a04:e4c7:ffff::20/125 (IPv6) | 80/443 | TCP |