browse
Overview
If your AnyConnect SWG Module is failing to connect to Umbrella, please check that the following firewall ports are allowed:
| 53 UDP & TCP | 208.67.222.222 / 208.67.220.220 |
| 443 UDP & TCP (Encryption only) | 208.67.222.222 / 208.67.220.220 |
| 80 TCP | crl3.digicert.com and crl4.digicert.com |
| 443 TCP | 146.112.255.101, 67.215.71.201, 67.215.92.210, 146.112.255.155, sync.hydra.opendns.com*, crl3.digicert.com and crl4.digicert.com** |
| 80 TCP & 443 TCP | 146.112.0.0/16, 155.190.0.0/16, 151.186.0.0/16 |
*Please note that sync.hydra.opendns.com can resolve to several IP addresses within the 146.112.63.0/24 IP range - currently, the 4 IP addresses are 146.112.63.3 to 146.112.63.9 and 146.112.63.11 to 146.112.63.13.
**The Digicert IP addresses are subject to change. Currently, these domains resolve to the IPs
- 192.229.211.108
- 192.229.221.95
- 152.195.38.76
- 192.16.49.85