Firewall permiss to access Cisco Backend

[Jesus Leonell Cruz Contreras]

Dear,

I'm install Cisco Collector 2.7 over Hyper-V environment, but no conection Cisco Backend.

When run collect and upload this result is failed.

Please , could send firewall port to access cisco backend and command test connectivity.

Thank

Regards

[Supriya Patel · Accepted solution]

Hi Jesus,

Your Firewall must be configured in order to allow these IP addresses, host names, and ports so that the upload processes successfully:

• 72.163.7.113 (TCP 443) concsoweb-prd.cisco.com 
• 72.163.4.161 (TCP 443/80) www.cisco.com
• 72.163.7.60 (TCP 443/80) dl.cisco.com
• 72.163.7.60 (TCP 443/80) dl1.cisco.com
• 173.37.146.12 (TCP 443/80) dl2.cisco.com
• 173.37.144.208 (TCP 443/80) sso.cisco.com

Thanks,

Supriya

[Cheri Fairbrother]

Hello Jesus,

Please let us know if you need further assistance with this.  If not, please mark Supriya's response as the solution to close the conversation.

Thanks!
Cheri

[danielbarri]

What's the right way to test if the collector is reaching the Cisco side? I've tried:

"curl https://72.163.4.161:443"
curl: (51) SSL: certificate subject name 'www.cisco.com' does not match target host name '72.163.4.161'

What does it mean?

[danielbarri]

I see that "curl -k https://[ip address]:[port]" seems to be work.

[Jarrett Pomeroy]

Hello Daniel,
I like to use this one for testing access (it will also work when a proxy is configured).
'wget https://72.163.7.113/ --no-check-certificate'
Thank you,
Jarrett

[danielbarri]

Hi,

Are those ip addresses, ports and hostnames up to date?

Thanks.

[Cheri Fairbrother]

Hi Daniel,

For the most up-to-date requirements, please see the CSPC Upgrade Guide, page 1-1 lists the IP's and ports needed for connection to Cisco servers.

Cheers,

Cheri