Network Configuration for Application Usage
All users are advised to whitelist our applications and URLs since some company firewalls, Data Loss Prevention (DLP), and/or Endpoint Protection (EP) might block its usage. Application whitelisting provides indexing of approved software applications that are permitted to be present and active on a computer system.
It is highly recommended that a decryption exception is specified for usage of our platform.
Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/decryption/configure-decryption-exceptions
Clients have reported issues due to the limitation of Palo Alto Networks “SSL decrypt exclude cache and unsupported ECDHE cipher suites” which requires an SSL bypass.
Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfGCAS
Depending on the software version and updated version of the categorization engine, the categorization of the URLs is determined. It is recommended that the URLs be manually categorized which provides correct access.
It is highly recommended that a decryption exception is specified for usage of our platform.
Reference: https://www.websense.com/content/support/library/web/hosted/admin_guide/ssl_bypass.aspx
Depending on the software version and updated version of the categorization engine determines the categorization of the URLs. It is recommended that the URLs be manually categorized which provides correct access.
The list below is not exhaustive but includes the majority of the URLs in use. The list is subject to change.
This will enable users to access and download content from these URLs without being blocked or flagged.
*.oncentrl.com (It is highly recommended that a wildcard be used for maximum coverage)
https://analytics14.oncentrl.com
https://supportcenter.oncentrl.com/
https://pw4fraa4w4ghupkn.s3.us-west-2.amazonaws.com/
|
In-Application Onboarding Assistance |
|
|
In-Application Support |
|
|
Analytics |
|
|
In-application Performance Monitoring |
*.oncentrl.net (It is highly recommended that a wildcard be used for maximum coverage)
https://sandboxanalytics11.oncentrl.net/
https://sandboxapp.oncentrl.net
https://sandboxauth.oncentrl.net
https://sandboxdsar.oncentrl.net