we're trying to get Internet access for ILMT for automatic updates and upgrades.

1) would you please give us the IP address ranges and protocols we need to request from security team?

2) there are several hostnames mentioned in a documentation: https://www.ibm.com/docs/en/license-metric-tool?topic=requirements-firewall-exceptions

but none of them belongs to IBM, does it mean all ILMT updates and IBM software catalogs will be downloaded from *.bigfix.com?

3) if bigfix.com is the only needed access, can you please specify the nature of those addresses?

are they dynamic or static and what is the ip-range if dynamic?

https://www.ibm.com/docs/en/license-metric-tool?topic=ir-network-port-requirements

esync.bigfix.com

gatherer.bigfix.com

software.bigfix.com

support.bigfix.com

sync.bigfix.com

1) We have no specific addresses but these are listed :

esync.bigfix.com

gatherer.bigfix.com

software.bigfix.com

support.bigfix.com

sync.bigfix.com

https://www.ibm.com/docs/en/license-metric-tool?topic=ir-network-port-requirements

2) Correct as once you allow these .bigfix addresses it will allow LMT packages to download.

3) You need to allow these :

esync.bigfix.com

gatherer.bigfix.com

software.bigfix.com

support.bigfix.com

sync.bigfix.com

If you have error on the above, please help to raise a new case as we will need to check further.

Thanks

In the document that you sent me there is data on the purpose of the servers, but there is no data on the IP addresses.

To obtain permission from the security service to access the update servers, I need to provide a list of IP addresses.

Hi Smirnov,

Thanks for your enquiry

Protocols used to connect to the sites below then it is HTTP/HTTPS. The sites they listed have static IP addresses as below.

esync.bigfix.com - 169.53.158.142

gatherer.bigfix.com - 64.14.29.67

software.bigfix.com - 174.36.239.144

support.bigfix.com - 169.53.158.140

sync.bigfix.com - 169.53.158.142

Thanks

The problem is the Azure cloud Network Security Group requires to use of IP addresses, not the URL. Why can you provide us with a tool or other means that we can retrieve up-to-date IP address information, So we don't have to go through the trouble asking for FW rules changes every time you decide to modify your IP Addresses for some reason or another.

Hi

Thank you for your question. Would is be possible for you to raise a case so we could work on this as this requires additional checks.

Thanks