Required internet URLs

Updated: September 18, 2026

Want to summarize with AI?

Lists essential external URLs that must be reachable by Cisco ISE to support critical functions such as license management, software updates, and cloud-based services.

Cisco ISE requires connectivity to specific external internet services to maintain up-to-date threat intelligence, license compliance, and cloud-integrated functionality. To ensure these services operate correctly, you must allow access to these URLs through their network firewalls.

This table lists the features that use certain URLs. You must configure either your network firewall or a proxy server so that IP traffic can travel between Cisco ISE and these resources. If you cannot provide access to a required URL, the related feature may not work as intended.

Configure your network firewall or proxy server to allow IP traffic between Cisco ISE and these resources. If access to any required URL is not possible, the feature may not function as intended.

Table 1. Required internet URLs
Feature	URLs
Posture updates	https://www.cisco.com/ https://iseservice.cisco.com
Profiling feed service	https://ise.cisco.com
Smart licensing	https://smartreceiver.cisco.com
Telemetry	https://connectdna.cisco.com/
Connection from Cisco ISE to Cisco pxGrid Cloud Portal	https://dna.cisco.com https://dnaservices.cisco.com https://ciscodnacloud.com
Cisco AI analytics	http://api.use1.prd.kairos.ciscolabs.com for the US East region http://api.euc1.prd.kairos.ciscolabs.com for EU central region Network connectivity to these required URLs is through HTTPS, TCP port 443.
Microsoft Entra ID	graph.microsoft.com login.microsoftonline.com:443 .login.microsoftonline.com:443 .login.microsoft.com:443
Workload connector	*.cloudfront.net:443 public.ecr.aws
Social login for self-registered guests	facebook.co akamaihd.net akamai.co fbcdn.net
Cisco DUO integration for multifactor authentication	*.duosecurity.com:443
Cloud multifactor classification service	https://closest-geox.device-profiler-global.outposts.ikarem.io https://use-ha.device-profiler-continental.outposts.ikarem.io https://apa-ha.device-profiler-continental.outposts.ikarem.io https://euc-ha.device-profiler-continental.outposts.ikarem.io

The Interactive Help feature requires Cisco ISE to connect to these URLs through the administration portal browser:

*.walkme.com
*.walkmeusercontent.com

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.