Bd Requests To 54.235.219.195 At Port 4001, 4004

bitter150
edited July 2013 in General

BD-IS requests on different machines to 54.235.219.195 at port 4001 and 4004.


Our office firewall (hardware) detected these outgoing requests. They are blocked, only port 80 and 443 are permitted.


IP belongs to Bitdefender (network-tools.com):


IP address: 54.235.219.195


Host name: push1.amz.vdc.bitdefender.net


54.235.219.195 is from United States(US) in region North America


BUT:


Which purpose do have this requests? Necessary for BD functionality?


EDIT:


There is a discussion in German forum too:


http://forum.bitdefender.com/index.php?showtopic=45008


post-146563-1375086928_thumb.jpg

Comments

  • antikythera
    edited July 2013

    That is an Amazon cloud server. Bitdefender uses cloud scanning for web traffic in Bitdefender 2013 and also uses cloud for antispam in 2014. All data filtered is interrogated in cloud. Also read the thread I link to. It should clarify everything you ask.


    http://forum.bitdefender.com/index.php?sho...st&p=163376


    Hence the requests. Hope that helps.

  • Thank you very much.


    For clarification:


    If server 54.235.219.195 at port 4001 and 4004 is blocked, NO antispam is working?

  • antikythera
    edited July 2013

    You're welcome.


    It may not get the bang up to date cloud info or be able to send anything if you click yes to share a message for analysis. However it should work off what you identify as spam/not spam on your own machine (assuming this is stored locally and not in the cloud too).


    Hopefully someone from Bitdefender will be able to clarify what if any definitions are available for antispam if you don't have cloud capability due to those ports being blocked.

  • Georgia
    Georgia ✭✭✭

    @bitter150


    The Bitdefender products communicate with the online platform MyBitdefender through the ports range 4001/4004. To be more specific, those ports are used for the Remote Management feature available via https://my.bitdefender.com


    You can safely block them.


    Now, to protect against spam a local set of Antispam signatures is used as well as in cloud detection. If you block the above ports the Antispam module will still work.


    Please feel free to contact us with additional questions or concerns. Hope you have a beautiful day ahead!