1. Home
    2. Security Operations
    3. Cortex Data Lake
    4. Cortex Data Lake Getting Started
    5. Get Started with Cortex Data Lake
    6. About Cortex Data Lake
    7. Cortex Data Lake Supported Region Information

    Cortex Data Lake
     Supported Region Information

    These are the regions that
    Cortex Data Lake
     supports and their associated IP addresses, FQDNs, and ports.
    These are the regions in which
    Cortex Data Lake
     is supported.
    • Log Forwarding IP Address
       is the address range that you must allow on your syslog or HTTPS server when forwarding logs from
      Cortex Data Lake
      .
    • FQDNs and Ports for Third-Party Firewalls
       are the FQDNs and ports that you must allow on your non-Palo Alto Networks firewalls to send log data to
      Cortex Data Lake
      .
    Region
    Log Forwarding IP Address
    FQDNs and Ports for Third-Party Firewalls
    Australia (AU)
    35.244.108.240/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.au1.se1.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-prd1.au1.se1.cdl.paloaltonetworks.com (TCP port 444)
    • fei-prd1.au1.se1.cdl.paloaltonetworks.com (TCP port 443)
    • br-prd1.au1.se1.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-au.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-au.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-au.gpcloudservice.com (TCP port 443)
    Canada (CA)
    34.95.59.80/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.ca1.ne1.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-prd1.ca1.ne1.cdl.paloaltonetworks.com (TCP port 444)
    • fei-prd1.ca1.ne1.cdl.paloaltonetworks.com (TCP port 443)
    • br-prd1.ca1.ne1.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-ca.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-ca.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-ca.gpcloudservice.com (TCP port 443)
    Germany (DE)
    35.246.195.240/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.de1.ew3.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-prd1.de1.ew3.cdl.paloaltonetworks.com (TCP port 444)
    • fei-prd1.de1.ew3.cdl.paloaltonetworks.com/ (TCP port 443)
    • br-prd1.de1.ew3.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-de.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-de.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-de.gpcloudservice.com (TCP port 443)
    India (IN)
    35.244.35.240/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.in1.as1.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-prd1.in1.as1.cdl.paloaltonetworks.com (TCP port 444)
    • fei-prd1.in1.as1.cdl.paloaltonetworks.com
      (TCP 443)
    • br-prd1.in1.as1.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-in.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-in.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-in.gpcloudservice.com (TCP port 443)
    Italy (IT)
    34.154.10.144/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.it1.ew8.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-prd1.it1.ew8.cdl.paloaltonetworks.com (TCP port 444)
    • fei-prd1.it1.ew8.cdl.paloaltonetworks.com (TCP port 443)
    • br-prd1.it1.ew8.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-it.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-it.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-it.gpcloudservice.com (TCP port 443)
    Japan (JP)
    34.84.94.80/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.jp1.ne1.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-prd1.jp1.ne1.cdl.paloaltonetworks.com (TCP port 444)
    • fei-prd1.jp1.ne1.cdl.paloaltonetworks.com (TCP port 443)
    • br-prd1.jp1.ne1.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-jp.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-jp.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-jp.gpcloudservice.com (TCP port 443)
    Netherlands - Europe (EU/NL)
    34.90.138.80/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.nl.cdl.paloaltonetworks.com (TCP 3978)
    • pcl-prd1.nl.cdl.paloaltonetworks.com (TCP 444)
    • fei-prd1.nl.cdl.paloaltonetworks.com (TCP port 443)
    • br-prd1.nl.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-eu.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-eu.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-eu.gpcloudservice.com (TCP port 443)
    Singapore (SG)
    34.87.142.80/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.sg1.se1.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-prd1.sg1.se1.cdl.paloaltonetworks.com (TCP port 444)
    • fei-prd1.sg1.se1.cdl.paloaltonetworks.com (TCP port 443)
    • br-prd1.sg1.se1.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-sg.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-sg.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-sg.gpcloudservice.com (TCP port 443)
    Spain (ES)
    34.175.10.160/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.es1.sw1.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-prd1.es1.sw1.cdl.paloaltonetworks.com (TCP port 444)
    • fei-prd1.es1.sw1.cdl.paloaltonetworks.com (TCP port 443)
    • br-prd1.es1.sw1.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-es.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-es.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-es.gpcloudservice.com (TCP port 443)
    Switzerland (CH)
    34.65.166.64/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.ch1.ew6.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-prd1.ch1.ew6.cdl.paloaltonetworks.com (TCP port 444)
    • fei-prd1.ch1.ew6.cdl.paloaltonetworks.com
      (TCP 443)
    • br-prd1.ch1.ew6.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-ch.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-ch.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-ch.gpcloudservice.com (TCP port 443)
    United Kingdom (UK)
    35.246.51.240/28
    *.lc.prod.us.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.uk.cdl.paloaltonetworks.com (TCP 3978)
    • pcl-prd1.uk.cdl.paloaltonetworks.com (TCP 444)
    • fei-prd1.uk.cdl.paloaltonetworks.com (TCP port 443)
    • br-prd1.uk.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-uk.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-uk.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-uk.gpcloudservice.com (TCP port 443)
    United States - Americas (US)
    34.67.106.64/28
    *.lc.prod.us.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-prd1.us.cdl.paloaltonetworks.com (TCP 3978)
    • firewall-prd1.us2.cent1.cdl.paloaltonetworks.com (TCP 3978)
    • pcl-prd1.us.cdl.paloaltonetworks.com (TCP 444)
    • fei-prd1.us.cdl.paloaltonetworks.com (TCP port 443)
    • eal-prd1.us2.cent1.cdl.paloaltonetworks.com (TCP port 443)
    • br-prd1.us.cdl.paloaltonetworks.com (TCP port 443)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-us.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-us.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-us.gpcloudservice.com (TCP port 443)
    United States - Government (USA Gov)
    34.67.50.64/28
    • *.lc.prod.eu.cs.paloaltonetworks.com and *.cdl.paloaltonetworks.com
    • firewall-gov.gov.cdl.paloaltonetworks.com (TCP port 3978)
    • pcl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 444)
    • lic.lc.prod.us.cs.paloaltonetworks.com (TCP port 444)
    • br-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • storage.googleapis.com (TCP port 443)
    • cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com (TCP port 443)
    • *.in2-lc-prod-gov-us.gpcloudservice.com (TCP 3978)
    • *.api2-lc-prod-gov-us.gpcloudservice.com (TCP 444)
    • *.fei-lc-prod-gov-us.gpcloudservice.com (TCP port 443)
    If you plan to use Cortex XDR with Cortex Data Lake deployed in the United Kingdom (UK), all Cortex XDR logs and data are stored within the UK boundary, but Cortex XDR will send files that require analysis to the WildFire cloud for EU. If your compliance and privacy laws prohibit files from leaving the UK region, disable file uploads to WildFire in your Malware Security Profiles.

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2023 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo