Proxy Chain to Explicit Proxy Exclusions - EU Cloud
When a user device with the SmartEdge agent 2.1.0 or higher version comes to the Explicit Proxy configured Site (branch office), then the Cloud SWG Explicit Proxy and the SmartEdge agent interoperate based on Agent Override Settings.
You must bypass the following domains on your firewall for the Agent Proxy Chain configuration to work correctly while using SmartEdge Agent 2.1.0 or higher version with Cloud SWG Explicit Proxy.
Cloud SWG
| URL/Domain | Description |
|---|---|
| d1l23iwzt3tksu.cloudfront.net | PAC file |
| <tenant domain>-prodeu.swg.forcepoint.io:8081 | Cloud SWG Endpoint |
| Any tenant-created bypass domains | Tenant specific bypassed domains |
Non-Tunnel Traffic
| URL/Domain | Description |
|---|---|
| portal.eu.bitglass.net | Login page |
| www.eu.bitglass.net | Agentless / reverse proxied app access |
|
ajax.aspnetcdn.com cdnjs.cloudflare.com code.jquery.com |
Scripts for portal.eu.bitglass.net |
| d2v4ojxgeuzgdy.cloudfront.net | portal.eu.bitglass.net page objects |
|
cdn.walkme.com playerserver.walkme.com ec.walkme.com papi.walkme.com ec-playback.walkme.com s3.walkmeusercontent.com |
Walk-Me Portal Assistance |
| s3.eu-central-1.amazonaws.com | Images for custom apps |
| bitglass-prodeu-agent-artifacts.s3.amazonaws.com | AD sync agent download |
| <tenant domain>.sso.eu.bitglass.net | Login client cert check |
|
All bypassed domains in Agent and Explicit Proxy PAC files |
SmartEdge Agent
| Domains | Description |
|---|---|
| d1l23iwzt3tksu.cloudfront.net | Agent PAC file |
| kinesis.eu-central-1.amazonaws.com | Agent Logs uploading to Kinesis |
|
proxy.smartedgehealth.com direct.smartedgehealth.com |
Agent Health check On Port 80 and 443 |
| aowd3xchomdxc-ats.iot.eu-central-1.amazonaws.com | Agent Tray IOT Notifications |
| cv.eu.bitglass.net | Agent Configuration |
| d2pbup0tl6y1pd.cloudfront.net | Web Reputation Lookup |
|
<tenantdomain>-prodeu.rbi.forcepoint.net <cluster name>.rbi.forcepoint.net |
RBI |
| icap-service.eu.bitglass.net | Agent Download DLP |
| ztnarouter.eu.bitglass.net | ZTNA Router |
| ztnahaproxy-*.eu.bitglass.net | ZTNA Load Balancer |
| saseagent.secure.eu.bitglass.net | Agent Dataplane Traffic |