Skip to main content

Connectivity to Checkmarx SCA Cloud

In order to access Checkmarx SCA Cloud, you will need to have access to the relevant URLs, shown below. You may need to add these to your firewall allowlists or proxies.

Notice

This is necessary for accessing the Checkmarx SCA web portal as well as for sending request to Checkmarx SCA Cloud using APIs, Checkmarx SCA Resolver, Checkmarx SCA Agent or CI/CD plugins.

Checkmarx SCA Endpoints

Notice

We recommend adding the Checkmarx services URLs to your firewall rules and not the IP addresses. Since the IPs of Checkmarx service endpoints are not necessarily static, adding them directly to the firewall might not be effective.

The URLs are accessed by HTTPS protocol on port 443.

The Checkmarx SCA services are hosted in AWS, and have a dynamic IP address range.

Specific plugins have support for HTTP proxy.

For more information, see SAST/SCA Integrations

US Environment

Plugins that use the Checkmarx SCA cloud for scanning require access to the following URLs:

EU Environment

Plugins that use the Checkmarx SCA cloud for scanning require access to the following URLs:

Note

The minimal supported plugin versions for working with the EU environment are as follows:

  • CxConsole/CLI - version 2020.4.4

  • TeamCity - version 2020.3.8

  • Jenkins - version 2020.4.3