Which Adobe Creative Cloud services and endpoints are contacted when updating via RUM?

[ChimiChangaAlabama]

Hi there, I've had a frustrating amount of back and forth with Adobe support on the question of which specific endpoints need to be allowlisted for Remote Update Manager.

I was told that I needed to allowlist everything on the minimum allow list here: Network endpoints for Adobe apps & services. This is simply far too broad for my network and security teams to approve. I found lower on the page the downloadable endpoints matrix. This is much more reasonable, however I'm unclear which groups of the listed Adobe services rely on this.

The Updater service list seems too narrow. My assumption was that possibly some CDN network traffic was blocked on my end. I see some Cloudfront addresses under Adobe Creative Cloud services, but this list appears a bit broad.

It is unreasonable for Adobe to expect large/enterprise customers with security and regulatory obligations to whitelist such an exhaustive list without better specificity. Can we get some clarity on which specific endpoints from this list are used in the transport of Adobe Creative Cloud suite product updates when initiated via Remote Update Manager?

[Anshul_Nautiyal]

Hi there,

I’m sorry to hear you’re facing this issue.

We’re actively looking into it. We’ll get back to you as soon as we have an answer for this query. 

Thank you for your patience.

Regards,

^AN

[ChimiChangaAlabama]

Thank you. Looking forward to it.

[SuJoshi]

Hi @ChimiChangaAlabama 

I would recommend starting with the "The minimal allowlist" and "Deployment and fulfillment services" under the Identity and Sign-in Service section. 
If the issue persists, you can use any networking tool like Wireshark or Charles proxy to identify if any more endpoints are getting blocked in your network.  

[ChimiChangaAlabama]

As stated, I cannot start with the minimal allowlist. It is too expansive for a corporate security and networking team to approve.

Does Adobe not have an internal list of hostname endpoints that serve Creative Cloud application updates that can be provided? 

[Anshul_Nautiyal]

Hi there,

I’ve sent you a personal message. Please take a moment to review it, and feel free to reach out if you have any questions or need further clarification.

Thank you.

Regards,

A.N