What FQDN's and IP's are used by SonicWall products to update their services?

09/01/2021 43 People found this article helpful 37,931 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

This article lists the Fully Qualified Domain Names (FQDNs) in use by SonicWall for its licensing and security services.

Resolution

SonicWall firewalls:

• lm2.sonicwall.com - Registration information/licensing.
• licensemanager.sonicwall.com - Registration information/licensing for older firewalls.
• software.sonicwall.com - Softwares, firmwares, NetExtender, GVC.
• responder.global.sonicwall.com - Probe target.
• clientmanager.sonicwall.com - Client CF enforcement download.
• policymanager.sonicwall.com - Global Security Client.
• convert.global.sonicwall.com - Preference processor server.
• geodnsd.global.sonicwall.com - Used for flow reporting and GeoIP.
• webcfs00.global.sonicwall.com - Content filter server.
• webcfs01.global.sonicwall.com - Content filter server.
• webcfs02.global.sonicwall.com - Content filter server.
• webcfs03.global.sonicwall.com - Content filter server.
• webcfs04.global.sonicwall.com - Content filter server.
• webcfs05.global.sonicwall.com - Content filter server.
• webcfs06.global.sonicwall.com - Content filter server.
• webcfs07.global.sonicwall.com - Content filter server.
• webcfs08.global.sonicwall.com - Content filter server.
• webcfs10.global.sonicwall.com - Content filter server.
• webcfs11.global.sonicwall.com - Content filter server.
• gcsd.global.sonicwall.com - Cloud antivirus and status.
• sig2.sonicwall.com - Signature updates.
• sigserver.global.sonicwall.com - Signature updates for older firewalls.
• lmdashboard.global.sonicwall.com - License manager dashboard.
• appreports.global.sonicwall.com - App reports server.
• sonicsandbox.global.sonicwall.com - Default Capture ATP server (west coast) UDP 2259, and https (tcp 443).
• sonicsandboxmia.global.sonicwall.com  - East coast capture ATP server UDP 2259, and https (tcp 443).
• utmgbdata.global.sonicwall.com - Map info URL domain.
• cfssupport.sonicwall.com - View rating of a website.
• cloudtt.global.sonicwall.com - Zero Touch provisioning
• eprs2.global.sonicwall.com (204.212.170.36, 204.212.170.11, 204.212.170.10) - Content Filter Client servers.
• wsdl.mysonicwall.com  - Automatic preference backups and firmware downloads.
  
  This information can also be found in the Tech Support Report (TSR). More information about the TSR can be found in the following article:
  How to Download Tech Support Files (TSR, EXP, Logs) From SonicWall UTM Firewalls
  
  

Capture Client software:

• captureclient-36.sonicwall.com
• captureclient.sonicwall.com
• sonicwall.sentinelone.net (S1 agent)
• software.sonicwall.com (software package updates)
• sonicsandbox.global.sonicwall.com (Capture ATP- Applicable for Capture Client Advanced License)
  
  

SonicWall CSC:

• For SanJose Colo
  
  FQDN: cloudgms.sonicwall.com
  Zero Touch FQDN: cloudtt.global.sonicwall.com
  IP: 4.16.47.168, 4.16.47.188
  
  
  
• For AWS Colo
  
  FQDN: cscma.sonicwall.com
  Zero Touch FQDN: cscmatt.global.sonicwall.com
  IP: 34.211.138.110, 52.37.12.168, 52.89.82.203, 52.11.92.114
  
  
  
• For AMS Colo
  
  FQDN: cloudgmsams.sonicwall.com
  Zero Touch FQDN: cloudttams.global.sonicwall.com
  IP: 213.244.188.168, 213.244.188.188
  
  
  
• For AWS-FRA Colo
  
  FQDN: cscmafra.sonicwall.com
  Zero Touch FQDN: cscmafratt.global.sonicwall.com, cscmafratta.global.sonicwall.com
  IP: 18.197.234.66, 18.197.234.59
  
  

SonicWall NSM:

• For Oregon AWS Colo
  
  FQDN: nsm-uswest.sonicwall.com (Use it in GMS settings under Administration Page)
  Zero Touch FQDN: nsm-uswest-zt.sonicwall.com (Use it in ZeroTouch Settings under Diag page)
  IP: 13.227.130.81, 13.227.130.63, 3.227.130.69, 13.227.130.12, 52.39.29.75, 44.233.105.101, 44.227.248.206
  
  
  
• For AWS-FRA Colo
  
  FQDN: nsm-eucentral.sonicwall.com (Use it in GMS settings under Administration Page)
  Zero Touch FQDN: nsm-eucentral-zt.sonicwall.com (Use it in ZeroTouch Settings under Diag page)
  IP: 13.227.130.70, 13.227.130.69, 13.227.130.15, 13.227.130.92, 18.156.16.24, 18.157.240.148, 3.127.176.56

Related Articles

• How to enable and configure NTP?
• Cannot edit App Control Signatures, "Error: property 'value' can't be empty value"
• SSL-VPN 2FA: How to unbind TOTP for a single user or multiple users

Categories

• Firewalls > NSv Series
• Firewalls > NSa Series
• Firewalls > TZ Series
• Capture Security Center > Licensing