Domains Required for Strata Cloud Manager
If using a proxy, allow these domains to use Strata Cloud Manager.
| Where Can I Use This? | What Do I Need? |
|---|
If outbound traffic from your devices
passes through a proxy, ensure that you have allowed the following
FQDNs in order to successfully use Strata Cloud Manager.
Domains to Access Strata Cloud Manager
The
Strata Cloud Manager web interface runs in your browser, and your browser
connects directly to the domains below. If a proxy, firewall, or browser policy
blocks one of these domains, some pages might load incorrectly or show no data.
From every workstation that you use to open Strata Cloud Manager, allow
HTTPS (TCP port 443) to these domains, regardless of your geographic region. This
list doesn't apply to IL5 deployments, and it can change when new features are
released.
Required Domains
| Domain | Purpose |
|---|
| *.paloaltonetworks.com | Strata Cloud Manager application, sign in, APIs,
and content delivery |
| *.prismaaccess.com | Prisma Access and Autonomous Digital Experience Management
(ADEM) data |
| *.paloaltonetworks.cloud | Regional reporting and data services |
| app.launchdarkly.com | Feature configuration. If this domain is blocked, some
features don't display or don't work correctly. |
| events.launchdarkly.com | Feature configuration |
Domains Required for Specific Pages
| Domain | Purpose |
|---|
| maps.googleapis.com | Map views |
| mapsresources-pa.googleapis.com | Map views |
| api.mapbox.com | Map views |
| events.mapbox.com | Map views |
| fonts.googleapis.com | Fonts |
| *.talon-sec.com | Prisma Browser pages |
The web interface continues to work if you block the
following recommended domains, but the features listed in the Purpose column
stop working.
Recommended Domains
| Domain | Purpose |
|---|
| *.pendo.io | In-product guidance and usage analytics |
| pendo-static-6231251737640960.storage.googleapis.com | In-product guidance content |
| *.ingest.us.sentry.io | Error and performance reporting. Palo Alto Networks
Support uses this data to find the cause of a problem. |
| backend.getbeamer.com | Product announcements |
| cloudgenix.statuspage.io | Service status notices |
App-IDs and Domains to Send Telemetry
See
TCP Ports and FQDNs Required
for for the App-IDs and ports that you must
allow on your Palo Alto Networks firewalls to successfully send
telemetry data to
Strata Cloud Manager.
On your proxy
server, in addition to allowing the required
ports and FQDNs, allow
the domain that corresponds to your geographic region so that your
devices can send telemetry data to
Strata Cloud Manager.
| Region | Domain |
|---|
| US | http://br-prd1.us.cdl.paloaltonetworks.com/ |
| Europe | http://br-prd1.nl.cdl.paloaltonetworks.com/ |
| UK | http://br-prd1.uk.cdl.paloaltonetworks.com/ |
| Canada | http://br-prd1.ca1.ne1.cdl.paloaltonetworks.com/ |
| Singapore | http://br-prd1.sg1.se1.cdl.paloaltonetworks.com/ |
| Japan | http://br-prd1.jp1.ne1.cdl.paloaltonetworks.com/ |
| Australia | http://br-prd1.au1.se1.cdl.paloaltonetworks.com/ |
| Germany | http://br-prd1.de1.ew3.cdl.paloaltonetworks.com/ |
| India | http://br-prd1.in1.as1.cdl.paloaltonetworks.com/ |
