Allowlisting outbound traffic for Blumira Agent

Overview

If your organization is actively blocking outbound traffic or using SSL interception, you must add the following URLs, IP address, and SSL Certificate Exclusion to your firewall's allowlist so the agent can connect successfully to Blumira.

Allowlisting by URLs

To download the agent, allowlist the URL appropriate for your operating system:

• Windows:

  https://dl.blumira.com/agent/files/blu_agent.exe

• Linux:

  https://dl.blumira.com/blumira_linux_agent.sh

• Mac:

  https://dl.blumira.com/blumira_macos_agent.sh

To ship agent logs, allowlist the following URL:

9157798c50af372c.lc.limacharlie.io:443

Allowlisting by IP address

In some cases, you might need to allowlist the following IP address to ship agent logs:

35.194.62.236

SSL Certificate Exclusion

If you use SSL decryption or interception, you might need to allowlist this SSL Certificate Exclusion:

rp_c2_dev

If you have not added the above to your allowlist and the installation of the agent fails, you can run this command to see if something is blocking or intercepting the SSL Certificate for the agent:

test-netconnection -computername "9157798c50af372c.lc.limacharlie.io" -port "443"

If the output confirms that traffic is being blocked, ensure that you add the above URLs, IP address, and SSL Certificate Exclusion to your firewall allowlist.