Blocking Adobe Cloud via Firewall

[Guest]

Hi,

One of our customers is starting to use Adobe Acrobat Pro DC. They also have a very strict policy that does not allow any cloud storage solution of any kind due to the sensitive data that they deal with.

We need some form of process to block the Cloud part of the adobe products to allow the users to use the software safely.

I've seen we can apply Reg changes to these machines to stop this, but we're hoping for a number of IP addresses and Ports that we can block on the companies Corporate Palo Alto. I've seen a list of hostnames but haven't seen the ones that specifically apply to only the Adobe Cloud Services.

If someone could provide me with that Info It will be much appreciated.

Thanks

Ivan Chambers

[alisterblack]

Hi,

Please refer to the following documents

https://helpx.adobe.com/content/dam/help/attachments/Creative_Cloud_for_enterprise_Service_Endpoints...

http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/creativesuite/pdfs/ControllingS...

You can also use Acrobat Customization Wizard to de-activate online service access from the desktop apps.

Online features — Acrobat Customization Wizard DC for Windows

[Guest · Accepted solution]

Thanks for getting back to me so quickly.

Can I confirm with you that I will need to block these;

scproxy-prod.adobecc.com

*.adobesc.com

cc-collab.adobe.io

cc-api-cp.adobe.io

In order to stop the users being able to upload files to the cloud?

Thanks

Ivan Chambers

[alisterblack]

Yes, those are the endpoints for non-browser clients.

[Guest]

Thank you for your help Alister!

[Ef23248548sg6f]

Hi Alister,

How about if you would like to block and you are using browser based?

I would like to block the following:

https://acrobat.adobe.com/link/tools/?group=group-share

https://acrobat.adobe.com/link/tools/files

Adding the URL does not block it entirely.

[LoriFer]

I am not able to get the Acrobat Wizard to work on any Creative Cloud Packages in order to block syncing or uploading content via Creative Cloud Manager or desktop apps. Can you confirm this is possible? Or should I use the firewall block as listed?

[alisterblack]

Hi,

Acrobat Customization Wizard can only be used with Acrobat, use the appropriate version, e.g. Customization Wizard DC with Acrobat DC. Within Customization Wizard open the Acrobat DC msi file. This will work with either a downloaded Acrobat DC msi file or an Acrobat package created with Creative Cloud Packager. For the CCP created package note that the Acrobat msi is separate from the main 'build' msi, see below.

Within Customization Wizard choose to Disable All Services as noted here: Online features — Acrobat Customization Wizard DC for Windows

When finished you will have an mst file as noted above.

This can be installed with the main Acrobat package. Some command line examples are here Deploying Customized Installers — Acrobat Customization Wizard DC for Windows

This will only work with Acrobat, other applications will not be affected.