Connectivity to Checkmarx SCA Cloud
In order to access Checkmarx SCA Cloud, you will need to have access to the relevant URLs, shown below. You may need to add these to your firewall allowlists or proxies.
Notice
This is necessary for accessing the Checkmarx SCA web portal as well as for sending request to Checkmarx SCA Cloud using APIs, Checkmarx SCA Resolver, Checkmarx SCA Agent or CI/CD plugins.
Checkmarx SCA Endpoints
Notice
We recommend adding the Checkmarx services URLs to your firewall rules and not the IP addresses. Since the IPs of Checkmarx service endpoints are not necessarily static, adding them directly to the firewall might not be effective.
The URLs are accessed by HTTPS protocol on port 443.
The Checkmarx SCA services are hosted in AWS, and have a dynamic IP address range.
Specific plugins have support for HTTP proxy.
For more information, see SAST/SCA Integrations
US Environment
Plugins that use the Checkmarx SCA cloud for scanning require access to the following URLs:
Checkmarx SCA API - https://api-sca.checkmarx.net
Access Control URL - https://platform.checkmarx.net
Checkmarx SCA Web Application - https://sca.checkmarx.net
Code upload endpoint - https://uploads.sca.checkmarx.net
EU Environment
Plugins that use the Checkmarx SCA cloud for scanning require access to the following URLs:
Checkmarx SCA API - https://eu.api-sca.checkmarx.net
Access Control URL - https://eu.platform.checkmarx.net
Checkmarx SCA Web Application - https://eu.sca.checkmarx.net
Code upload endpoint - https://uploads.eu.sca.checkmarx.net
Note
The minimal supported plugin versions for working with the EU environment are as follows:
CxConsole/CLI - version 2020.4.4
TeamCity - version 2020.3.8
Jenkins - version 2020.4.3