Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.
Is there a list of public ip's/servers that QRadar Advisor with Watson is connecting to?
Customer would like to close their firewall as much as possible.
I believe this page has the information you are looking for. All communication uses port 443 on the following IP addresses.
https://www.ibm.com/docs/en/qradar-common?topic=app-proxy-fails-validate
I can't tell from the link presented above which way the client/server communications work over the listed IP addresses.
Does QRadar Console that have QAWW installed need to be able to initiate a session to the listed IP addresses on TCP 443?