Cortex Data Lake
Supported Region Information

These are the regions that
Cortex Data Lake
supports and their associated IP addresses, FQDNs, and ports.
These are the regions in which
Cortex Data Lake
is supported.
  • Log Forwarding IP Address
    is the address range that you must allow on your syslog or HTTPS server when forwarding logs from
    Cortex Data Lake
    .
  • FQDNs and Ports for Third-Party Firewalls
    are the FQDNs and ports that you must allow on your non-Palo Alto Networks firewalls to send log data to
    Cortex Data Lake
    .
Region
Log Forwarding IP Address
FQDNs and Ports for Third-Party Firewalls
Australia (AU)
35.244.108.240/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.au1.se1.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-prd1.au1.se1.cdl.paloaltonetworks.com (TCP port 444)
  • fei-prd1.au1.se1.cdl.paloaltonetworks.com (TCP port 443)
  • br-prd1.au1.se1.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-au.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-au.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-au.gpcloudservice.com (TCP port 443)
Canada (CA)
34.95.59.80/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.ca1.ne1.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-prd1.ca1.ne1.cdl.paloaltonetworks.com (TCP port 444)
  • fei-prd1.ca1.ne1.cdl.paloaltonetworks.com (TCP port 443)
  • br-prd1.ca1.ne1.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-ca.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-ca.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-ca.gpcloudservice.com (TCP port 443)
Germany (DE)
35.246.195.240/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.de1.ew3.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-prd1.de1.ew3.cdl.paloaltonetworks.com (TCP port 444)
  • fei-prd1.de1.ew3.cdl.paloaltonetworks.com/ (TCP port 443)
  • br-prd1.de1.ew3.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-de.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-de.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-de.gpcloudservice.com (TCP port 443)
India (IN)
35.244.35.240/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.in1.as1.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-prd1.in1.as1.cdl.paloaltonetworks.com (TCP port 444)
  • fei-prd1.in1.as1.cdl.paloaltonetworks.com
    (TCP 443)
  • br-prd1.in1.as1.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-in.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-in.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-in.gpcloudservice.com (TCP port 443)
Italy (IT)
34.154.10.144/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.it1.ew8.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-prd1.it1.ew8.cdl.paloaltonetworks.com (TCP port 444)
  • fei-prd1.it1.ew8.cdl.paloaltonetworks.com (TCP port 443)
  • br-prd1.it1.ew8.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-it.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-it.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-it.gpcloudservice.com (TCP port 443)
Japan (JP)
34.84.94.80/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.jp1.ne1.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-prd1.jp1.ne1.cdl.paloaltonetworks.com (TCP port 444)
  • fei-prd1.jp1.ne1.cdl.paloaltonetworks.com (TCP port 443)
  • br-prd1.jp1.ne1.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-jp.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-jp.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-jp.gpcloudservice.com (TCP port 443)
Netherlands - Europe (EU/NL)
34.90.138.80/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.nl.cdl.paloaltonetworks.com (TCP 3978)
  • pcl-prd1.nl.cdl.paloaltonetworks.com (TCP 444)
  • fei-prd1.nl.cdl.paloaltonetworks.com (TCP port 443)
  • br-prd1.nl.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-eu.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-eu.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-eu.gpcloudservice.com (TCP port 443)
Singapore (SG)
34.87.142.80/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.sg1.se1.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-prd1.sg1.se1.cdl.paloaltonetworks.com (TCP port 444)
  • fei-prd1.sg1.se1.cdl.paloaltonetworks.com (TCP port 443)
  • br-prd1.sg1.se1.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-sg.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-sg.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-sg.gpcloudservice.com (TCP port 443)
Spain (ES)
34.175.10.160/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.es1.sw1.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-prd1.es1.sw1.cdl.paloaltonetworks.com (TCP port 444)
  • fei-prd1.es1.sw1.cdl.paloaltonetworks.com (TCP port 443)
  • br-prd1.es1.sw1.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-es.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-es.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-es.gpcloudservice.com (TCP port 443)
Switzerland (CH)
34.65.166.64/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.ch1.ew6.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-prd1.ch1.ew6.cdl.paloaltonetworks.com (TCP port 444)
  • fei-prd1.ch1.ew6.cdl.paloaltonetworks.com
    (TCP 443)
  • br-prd1.ch1.ew6.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-ch.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-ch.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-ch.gpcloudservice.com (TCP port 443)
United Kingdom (UK)
35.246.51.240/28
*.lc.prod.us.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.uk.cdl.paloaltonetworks.com (TCP 3978)
  • pcl-prd1.uk.cdl.paloaltonetworks.com (TCP 444)
  • fei-prd1.uk.cdl.paloaltonetworks.com (TCP port 443)
  • br-prd1.uk.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-uk.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-uk.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-uk.gpcloudservice.com (TCP port 443)
United States - Americas (US)
34.67.106.64/28
*.lc.prod.us.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-prd1.us.cdl.paloaltonetworks.com (TCP 3978)
  • firewall-prd1.us2.cent1.cdl.paloaltonetworks.com (TCP 3978)
  • pcl-prd1.us.cdl.paloaltonetworks.com (TCP 444)
  • fei-prd1.us.cdl.paloaltonetworks.com (TCP port 443)
  • eal-prd1.us2.cent1.cdl.paloaltonetworks.com (TCP port 443)
  • br-prd1.us.cdl.paloaltonetworks.com (TCP port 443)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-us.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-us.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-us.gpcloudservice.com (TCP port 443)
United States - Government (USA Gov)
34.67.50.64/28
  • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
  • firewall-gov.gov.cdl.paloaltonetworks.com (TCP port 3978)
  • pcl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 444)
  • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
  • br-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • storage.googleapis.com (TCP port 443)
  • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
  • *.in2-lc-prod-gov-us.gpcloudservice.com (TCP 3978)
  • *.api2-lc-prod-gov-us.gpcloudservice.com (TCP 444)
  • *.fei-lc-prod-gov-us.gpcloudservice.com (TCP port 443)
If you plan to use Cortex XDR with Cortex Data Lake deployed in the United Kingdom (UK), all Cortex XDR logs and data are stored within the UK boundary, but Cortex XDR will send files that require analysis to the WildFire cloud for EU. If your compliance and privacy laws prohibit files from leaving the UK region, disable file uploads to WildFire in your Malware Security Profiles.

Recommended For You