Splunk AppDynamics

Whitelist EUM Synthetics w/ Industry Traffic Security Providers

jeremyGoldstein
Path Finder

We use an Internet traffic security provider (i.e. Akamai, Cloudflare, etc...) to monitor our inbound traffic to mitigate and prevent malicious actions against our sites. The tool uses an array of attributes, such as source IP Address, User-Agent, and demographics in its analysis. It also uses its own internal machine learning to flag & alert potential concerns based on known bot types and reputations.

We also use End User Experience Synthetics for most of our external facing platforms, to validate availability and functionality. These are run from various AppDynamics hosted sites, not internally hosted. How do we whitelist our synthetics run from AppDynamics hosted sites, to ensure that they are not unintentionally captured and flagged as potential bad actors?

Labels (1)
Tags (2)
0 Karma

iamryan
Community Manager
Community Manager

Hi @Jeremy.Goldstein,

I did some looking around in the Community and found these pages, that I think may help. They provide IP address that you can whitelist. 

KB Article: https://community.appdynamics.com/t5/Knowledge-Base/What-static-IP-addresses-does-AppDynamics-use-fo...

Docs page: (Click on the region where you are to find the specifics) https://docs.appdynamics.com/display/PAA/SaaS+Domains+and+IP+Ranges

0 Karma

jeremyGoldstein
Path Finder

Thanks Ryan. This helps, but doesn't answer the question. In the page, "Synthetic Hosted Agents" states "The fully qualified domain names (FQDNs) and the range of IP addresses are not currently available."

If the IP Addresses are dynamically set, what other attributes could be used to ensure that our synthetics are whitelisted?

https://docs.appdynamics.com/display/PAA/SaaS+Domains+and+IP+Ranges

0 Karma

iamryan
Community Manager
Community Manager

Hi @Jeremy.Goldstein,

After further digging, it does not seem this is possible at this time. My suggestion is to submit this as a feature request in our Idea Exchange. 

Here customers can submit, vote, and comment on ideas that help improve AppD. 

You can view the idea exchange here: https://community.appdynamics.com/t5/Idea-Exchange/idb-p/ideas

Review the submission guidelines here: https://community.appdynamics.com/t5/Knowledge-Base/Idea-Exchange-Submission-Guidelines/ta-p/38092

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...