Technical Articles ID:
KB93324
Last Modified: 3/22/2022
Environment
Endpoint Security (ENS) Adaptive Threat Protection (ATP) 10.x
ENS Common 10.x
ENS Firewall 10.x
ENS Threat Prevention 10.x
ENS Web Control 10.x
Summary
Recent updates to this article
Date
Update
March 22, 2022
Added a note that port 443 is used for communication to these URLs. Port 53 is used for avqs.mcafee.com/avts.mcafee.com.
Some components that ENS consumes perform off-box communication. The purpose of this article is to:
List the URLs used to perform off-box communication.
Describe the purpose behind the communication. The purpose depends on the ENS module (ATP, Common, Firewall, Threat Prevention, and Web Control).
IMPORTANT: The URLs might sometimes be blocked because of security restrictions or the network configuration. If these URLs are blocked, it adversely affects the functionality, efficacy, and intelligence of ENS. In environments where connections are proxied, lookups via port 53 (for file reputation) might fail because the proxy server can't correctly impersonate this DNS-like traffic.
NOTES:
If you resolve any of the below URLs, you might see the following as part of the domain name mapping: *.cloudplatform.mcafee.com. This name is an expected alias. The below URLs can resolve to multiple and differing IP addresses at different times.
Port 443 is used for communication to these URLs. Port 53 is used for avqs.mcafee.com/avts.mcafee.com.
Contents
Click to expand the section you want to view:
