Firewall exceptions

This section describes the firewall exceptions enterprises must utilize to extend beyond their own local and protected network domains and securely reach and connect to the Knox E-FOTA One server and its supporting Knox server resources. This section contains the URLs and port numbers that must be allowed and treated as trusted sites for enterprises attempting to reach Knox E-FOTA One servers.

Americas

If you are located in North/Central/South America and the Caribbean, apply the following firewall exceptions.

Server

Website	URL	Ports
Samsung Account	*.samsung.com	443, 80
SamsungKnox.com	.samsungknox.com .secb2b.com	443, 80
Knox E-FOTA One Portal	us-ke.samsungknox.com	443, 80

Client

Website	URL	Ports
GSLB	gslb.secb2b.com	443
Firmware management server	http://eu-efm.samsungknox.com/	443
S3 storage (firmware storage server)	http://kfm-prod.samsungknox.com/	443, 80
KSL (old SEG)	us-segd-api.secb2b.com us-segm-api.secb2b.com us-segp-api.secb2b.com	443
umc-cdn	umc-cdn.secb2b.com	443, 80
Knox PP/T&C	eula.secb2b.com	443, 80
Feedback	knoxservices.secb2b.com	443, 80
Pinning	pinning.secb2b.com pinning-02.secb2b.com	443, 80

EU, Asia, and other countries (except China and the Americas)

If you are located in the European Union, Asia, and other countries (except China and the Americas), apply the following firewall exceptions.

Server

Website	URL	Ports
Samsung Account	*.samsung.com	443, 80
SamsungKnox.com	.samsungknox.com .secb2b.com	443, 80
Knox E-FOTA One Portal	eu-ke.samsungknox.com	443, 80

Client

Website	URL	Ports
GSLB	gslb.secb2b.com	443
Firmware management server	http://eu-efm.samsungknox.com/	443
S3 storage (firmware storage server)	http://kfm-prod.samsungknox.com/	443, 80
KSL (old SEG)	eu-segd-api.secb2b.com eu-segm-api.secb2b.com eu-segp-api.secb2b.com	443
umc-cdn	umc-cdn.secb2b.com	443, 80
Knox PP/T&C	eula.secb2b.com	443, 80
Feedback	knoxservices.secb2b.com	443, 80
Pinning	pinning.secb2b.com pinning-02.secb2b.com	443, 80