{"id":6935,"date":"2024-02-19T15:36:47","date_gmt":"2024-02-19T13:36:47","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=announcement&#038;p=6935"},"modified":"2026-10-19T13:07:10","modified_gmt":"2026-10-19T10:07:10","slug":"network-addresses-for-withsecure-countercept","status":"publish","type":"announcement","link":"https:\/\/support.withsecure.com\/en\/announcements\/network-addresses-for-withsecure-countercept\/","title":{"rendered":"Network Addresses for WithSecure Countercept"},"content":{"rendered":"<p>In May 2024 we are releasing new versions of Countercept Agents for Windows, Linux and Mac platforms. Managed clients will get all these changes automatically. A little later we will publish new release groups to switch clients using managed updates in collaboration with the WithSecure Engagement team.After the upgrade new versions of Countercept Agents will start using new addresses. <\/p>\n<p>For many customers, WithSecure products will function correctly without needing to know which servers the products connect to.<\/p>\n<p>However, some administrators tightly control which network addresses they allow their clients to connect to (\u201cEgress control\u201d or \u201coutbound connections\u201d), and it is\u00a0<strong>mandatory<\/strong>\u00a0that they allow connections to the following addresses. WithSecure cannot guarantee the functionality of the products if access to these addresses is blocked.<\/p>\n<p><strong>The product may not function correctly if access to these network addresses is not allowed.<\/strong><\/p>\n<p>Please note that all the following require outbound connections to TCP\/443 unless otherwise stated.<\/p>\n<p>Additionally, any products listed in this document also includes F-Secure branded versions of the same products.<\/p>\n<h2 data-id=\"recommendations\">Recommendations<\/h2>\n<p>WithSecure recommends, where possible, that administrators allow outbound access to all address under the withsecure.com and fsapi.com domains. We do appreciate that this is not always possible due to firewall configuration limitations, or even from an operational perspective, so we are publishing an explicit list of server addresses.<\/p>\n<p>Please note that\u00a0<strong>we do not guarantee<\/strong>\u00a0this list of addresses is complete or will stay unchanged, so we strongly recommend bookmarking these articles for future reference. We will update these articles whenever needed.<\/p>\n<h2 data-id=\"withsecure-countercept\">WithSecure Countercept<\/h2>\n<h3 data-id=\"new-addresses\">New addresses <\/h3>\n<p>After the upgrade new versions of Countercept Agents will start using new addresses. <\/p>\n<p>Please note that all the following services require outbound connections to TCP\/443 unless otherwise stated. <\/p>\n<p>In addition, the use of an asterisk (*) below means that all hosts under that subdomain should be allowed (wildcard allow).<\/p>\n<ul>\n<li>*.fsapi.com (also port 80)<\/li>\n<li>ac3ujg1ortm4c-ats.iot.eu-west-1.amazonaws.com (also port 8883, if the network includes Windows 7, Windows Server 2008 R2, or Windows Server 2012 endpoints)<\/li>\n<li>c3hquxgihnj763.credentials.iot.eu-west-1.amazonaws.com<\/li>\n<li>ew1-famp-prd-system-transfer.s3.eu-west-1.amazonaws.com<\/li>\n<li>*.digicert.com<\/li>\n<\/ul>\n<p>If you are unable to allowlist wildcard, either from a technical or operational standpoint, please contact your WithSecure Engagement Manager who will be pleased to advise you further.<\/p>\n<h2 data-id=\"connectivity-checker\">Connectivity Checker<\/h2>\n<p>We also provide tools that can assist you in checking whether your firewall allows the needed external connections.<\/p>\n<h3 data-id=\"for-microsoft-windows\"><strong>For Microsoft Windows<\/strong><\/h3>\n<p>Download the Connectivity Tool from WithSecure\u2122 Support Tools library. Support Tools library, or using direct download link <a href=\"http:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fdownload.withsecure.com%2Fconnectivitytool%2FConnectionChecker.exe\" rel=\"nofollow noopener ugc\" target=\"_blank\">https:\/\/download.withsecure.com\/connectivitytool\/ConnectionChecker.exe<\/a>  <\/p>\n<p>Run the tool on the machine where the installation is being attempted by double clicking on the tool through Windows Explorer. The tool will prompt for administrator credentials when it runs.  <\/p>\n<p>Select MDR product from the list. <\/p>\n<p>If a proxy is going to be used for the installation, it must be defined when prompted. If a proxy is not going to be used, leave the proxy settings empty. <\/p>\n<h3 data-id=\"for-linux-and-mac\"><strong>For Linux and Mac<\/strong><\/h3>\n<p>Download the Connectivity Checker tool with the direct link  <a href=\"http:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fdownload.withsecure.com%2Fconnectivitytool%2Fwsconnectionchecker.zip\" rel=\"nofollow noopener ugc\" target=\"_blank\">https:\/\/download.withsecure.com\/connectivitytool\/wsconnectionchecker.zip<\/a> <\/p>\n<p>Unpack the tool with: unzip wsconnectionchecker.zip <\/p>\n<p>Set execution bit if needed:<\/p>\n<p><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">sudo chmod +rwx wsconnectionchecker <\/code><\/p>\n<p>Run the tool in Linux or Mac mode depending on your needs. If a proxy is going to be used for the installation, it must be defined with the -p parameter. If a proxy is not going to be used use parameter \u2018-d\u2019 instead, for example:<\/p>\n<p><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">.\\wsconnectionchecker -o linux -p http:\/\/myproxy.com:3128<\/code> <\/p>\n<p>or <\/p>\n<p><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">.\\wsconnectionchecker -o mac -d <\/code><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In May 2024 we are releasing new versions of Countercept Agents for Windows, Linux and Mac platforms. Managed clients will get all these changes automatically. A little later we will&hellip;<\/p>\n","protected":false},"template":"","announcement_category":[144],"class_list":["post-6935","announcement","type-announcement","status-publish","hentry"],"acf":{"source_system":"vanilla-import","import_hash":"5586ad351271503c69800a6cb57f1d94f08d17cc","vanilla_article_id":31290,"legacy_author":"AndyF_WS","vanilla_url":"https:\/\/community.withsecure.com\/announcements-en\/kb\/articles\/31290-network-addresses-for-withsecure-countercept","vanilla_category_id":227,"machine_translated":false},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement\/6935","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/announcement"}],"version-history":[{"count":1,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement\/6935\/revisions"}],"predecessor-version":[{"id":8268,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement\/6935\/revisions\/8268"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=6935"}],"wp:term":[{"taxonomy":"announcement_category","embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement_category?post=6935"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}