browse
Overview
If your AnyConnect SWG Module is failing to connect to Umbrella, please check that the following firewall ports are allowed:
| 53 UDP & TCP | 208.67.222.222 / 208.67.220.220 |
| 443 UDP & TCP (Encryption only) | 208.67.222.222 / 208.67.220.220 |
| 80 TCP | crl3.digicert.com and crl4.digicert.com |
| 443 TCP | 146.112.255.101, 67.215.71.201, 67.215.92.210, 146.112.255.155, sync.hydra.opendns.com*, crl3.digicert.com and crl4.digicert.com** |
| 80 TCP & 443 TCP | 146.112.0.0/16, 155.190.0.0/16, 151.186.0.0/16 |
*Please note that sync.hydra.opendns.com can resolve to several IP addresses within the 146.112.63.0/24 IP range - currently, the 4 IP addresses are 146.112.63.3 to 146.112.63.9 and 146.112.63.11 to 146.112.63.13.
**The Digicert IP addresses are subject to change. Currently, these domains resolve to the IPs 72.21.91.29, 117.18.237.29, 93.184.220.29, 205.234.175.175.