IP list for auto-update of flash player

[Guest]

Hello,

Can anyone provide definitive IP list for auto-update of flash player which should be registered on our ASA as whitelist, in order to bypass our cloud web security service (SaaS)? The background updater fails with the service.

From my investigation, Wireshark shows the service couldn't relay message upstream, and I know there are many problems on adobe installation with proxy. So I need to bypass the service.

---------------------

GET /get/flashplayer/update/current/install/install_all_win_ax_sgn.z HTTP/1.1

User-Agent: Flash Player Seed/3.0

Host: fpdownload.macromedia.com

HTTP/1.1 502 Could not relay message upstream

Connection: close

---------------------

The past article shows their URL but, not only http but also https... It means IP list is required to configure on ASA...

Adobe Flash Player Background Updater - List of URLs to Allow to Bypass Proxy‌

Thank you for the help!

[jeromiec83223024 · Accepted solution]

No.  The binary assets are hosted in the Akamai CDN, and source IPs can and will change.

An alternative would be to host and manage an auto update server inside your network, and configure your clients to specifically point to it.

Details can be found in the system adminstrator's guide, here:

Adobe Flash Player Administration Guide for Flash Player | Adobe Developer Connection

[_maria_]

Hi,

The URL path you posted is not for Background Updates.  It is for Notification Updates (user notified an update is available and click on the notification to download and install the update).

Jeromie's recommendation is most likely the best option for you.  If you haven't done so yet, apply for a distribution license (free for most use cases) and then host the Background Update resources locally.  Information. and requirements, for configuring the local server are in Chapter 3 of the Admin Guide Jeromie links to.

--

Maria

[Guest]

Thanks for the info, Jeromie and Maria. Alternative solution is worth considering but, it requires us additional works and costs...

By the way, if Background Update has different URLs from Notification Update, would you please share it also?

Thanks.

[_maria_]

Hi,

Background Update URLs are listed in the Admin Guide Jeromie previous linked to, in chapter 3.  Note that the URL path changes with each major release.

--

Maria