tools.cisco.com replaced by smartreceiver.cisco.com

[adamscottmaster2013]

I was told by TAC engineer that tools.cisco.com is replaced by smartreceiver.cisco.com in ISE 3.1 patch-5.  Furthermore, I need to whitelist the following FQDNs on the firewalls in order for ISE smart licensing to work properly:

- https://smartreceiver.cisco.com

- https://software.cisco.com

Does it mean that I can remove whitelisting tools.cisco.com, tools1,cisco.com, tools2.cisco.com and tools3.cisco.com from the firewalls?  Furthermore, anyone has the documentation where I can look this up?

Thoughts?

[Rodrigo Diaz · Accepted solution]

@adamscottmaster2013  it's correct your statement , smartreceiver.cisco.com is going to be used in ISE newer releases, refer to this https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/install_guide/b_ise_InstallationGuide31/b_ise_InstallationGuide31_chapter_7.html 

Rate and comment if that helped you. 

[adamscottmaster2013]

@Rodrigo Diaz:  Is it safe for me to remove tools, tools1, tools2, tools3.cisco.com from the whitelisting?

[Rodrigo Diaz]

if you are in the patch 5 for 3.1 , yes

[adamscottmaster2013]

@Rodrigo Diaz:  I found it not to be true at all.  I rebooted the ISE 3.1 patch-5 multiple times and I am still seeing it attempt to connect with tools.cisco.com or tools1.cisco.com (tools.cisco.com is an alias of tools1.cisco.com).  I confirm it with tcpdump on the Cisco ISE itself.

Thoughts?

[Rodrigo Diaz]

I did one test myself with one ISE 3.1 p5 and the http traffic goes to smartreceiver.cisco.com at port 443 if you are seeing that please work with TAC to address it .