Configuring your firewall to allow network traffic for Webroot Business products

For Webroot Business products to function properly, they need to be able to communicate with specific URLs over standard ports. See the information below for the URLs and ports used for each product. Your firewall may need to be modified to allow this network traffic.

+Business Endpoint Protection

Ports

PC: 80 and 443
Mac: 8090

These ports are used by the agent to communicate with the Webroot Threat Intelligence Platform and your management console. Communications are encrypted using a proprietary form of obfuscation.

URLs

Note: Some firewalls do not support double dotted subdomain names with a single wildcard mask (i.e. g1.p4.webrootcloudav.com being represented by *.webrootcloudav.com). In these cases, you will need to use *.p4.webrootcloudav.com or *.*.webrootcloudav.com.

Agent communication and updates
*.webrootcloudav.com

Agent Messaging
*.webroot.com

Management portal and support ticket logs upload
*.webrootanywhere.com

Agent file downloading and uploading
wrskynet.s3.amazonaws.com/*
wrskynet-eu.s3-eu-west-1.amazonaws.com/*
wrskynet-oregon.s3-us-west-2.amazonaws.com/*

WebFiltering
WSAWebFilteringPortal.elasticbeanstalk.com (elasticbeanstalk is an Amazon AWS domain)

+DNS Protection

Webroot DNS Protection uses the same ports and URLs as Business Endpoint Protection and needs those allowed.

In addition, please allow outbound connections to:
*.brightcloud.com
*.webroot.com
35.241.25.47
2600:1901:0:400e::

If wildcards are not supported:
DoH Server
res1.dns.webroot.com

APIs
sdnsp.brightcloud.com
sdnsagent.brightcloud.com
dnsp-ipv4-detector.brightcloud.com
dnsp-ipv6-detector.brightcloud.com

DNS Block Page
35.241.25.47
2600:1901:0:400e::

+Security Awareness Training

Webroot Security Awareness Training uses the same ports and URLs as Business Endpoint Protection for console communication, no additional changes are needed.

For additional assistance, please contact Webroot Support.

Thanks for your feedback!