IP Range for SSIM LiveUpdate Servers
Updated: 11 Oct 2010 | 6 comments
Hi,
I wish to tighten my firewall rules by only allowing SSIM to access SSIM Live Update Servers.
May I know the range of IP Address for the SSIM Liveupdate Servers?
Discussion Filed Under:
Comments
Hi, I think there are
Hi,
I think there are tousands of servers. Two options you have. Make restrictions on domain names or create a LiveUpdate Server (service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2008121011063854)
Yeah i agree with Balazs.
Yeah i agree with Balazs. Just make the firewall rule reflect the liveupdate.symantec.com record. It uses round robin DNS so as stated above, there are potentially hundreds of different IP's associated with this domain record.
As pointed out the LiveUpdate
As pointed out the LiveUpdate Architecture is supported by Akamai, this include more than 10000 servers located worldwide and replicating.
It is better to use domain name to limit access:
http://liveupdate.symantecliveupdate.com
http://liveupdate.symantec.com
ftp://update.symantec.com/opt/content/onramp
Laurent
Hi, I have juniper ssg550m
Hi,
I have juniper ssg550m series firewall, in this we have to define rules specific to some external IP, firewall doesnt allow to randomely pick external internet IP or firewall doesnt understand dns kind of entry ( no feature available). so in this situation, what would symantec suggest ?
Regards,
Jigar Dave
You need to create a host
You need to create a host entry in the Juniper. I'm familiar with the SSG models and this is possible. When creating an address location just use the dns name instead of the IP.
Depending where your are
Depending where your are located in the world (or more exactly where the internet access of the liveudpate machine located) you will have a different result for the IP address of liveupdate server.
Would you like to reply?
Login or Register to post your comment.