IBM Support

PLEASE READ: MaaS360 Platform to utilize Akamai WAF/DDOS Technology - Possible Customer Impact! June, Sept and December 2019

Flashes (Alerts)


Abstract

**UPDATED DECEMBER 4, 2019** Changes made to the impact to December. Note changes will only be applied to M2 Portal Instance. To help clarify that detail, a separate page for December impact can be viewed here: https://www.ibm.com/support/pages/node/1106235

**UPDATED SEPTEMBER 19, 2019** MaaS360 Platform is planning to utilize Akamai's WAF/DDOS Technology, which is an industry-leading web application firewall (WAF) and distributed denial-of-service (DDoS) protection solution. Akamai's WAF/DDOS Technology guards MaaS360 applications against the largest and most sophisticated attacks. It delivers proprietary rule sets and detection logic honed from Akamai's experience and investment in defending against the latest cyberattacks.

Customers who currently have firewall rules open specifically to MaaS360 DNS & IP addresses will also need to open default https protocol to below Akamai domains to connect to MaaS360 services.

Content

**UPDATED DECEMBER 4, 2019**  Changes made to the impact to December.  Note changes will only be applied to M2 Portal Instance.  To help clarify that detail, a separate page for December impact can be viewed here: https://www.ibm.com/support/pages/node/1106235
MaaS360 Platform is planning to utilize Akamai's WAF/DDOS Technology, which is an industry-leading web application firewall (WAF) and distributed denial-of-service (DDoS) protection solution. Akamai's WAF/DDOS Technology, guards MaaS360 applications against the largest and most sophisticated attacks. It delivers proprietary rule sets and detection logic honed from Akamai's experience and investment in defending against the latest cyberattacks.
Akamai's WAF/DDOS Technology inspects web traffic and API requests using proprietary WAF rules with high accuracy. Automated rate controls block application traffic that exceeds our defined thresholds to defend against application-layer DDoS attacks.
IMPACT : June 28, 2019
Customers who currently have firewall rules open specifically to MaaS360 IP addresses, will need to open the default https protocol to the Akamai domain hostnames listed in the tables below and also keep the existing MaaS360 names to connect to MaaS360 services. 
Note: Update to rollout of these services listed below.   
IMPACT : June 28, 2019
Admin Portal
Existing MaaS360 Name New Akamai Hostname
M4 Instance m4.maas360.com maas360.com.edgekey.net **changes delayed
M6 Instance m6.maas360.com maas360.com.edgekey.net **changes delayed
M1 Instance portal.fiberlink.com fiberlink.com.edgekey.net ** Moved to Dec 2019
m1.maas360.com maas360.com.edgekey.net
M2 Instance m2.maas360.com maas360.com.edgekey.net ** Moved to Sept 2019
M3 Instance m3.maas360.com maas360.com.edgekey.net ** Moved to Dec 2019
End User Portal
Existing MaaS360 Name New Akamai Hostname
M4 Instance my.m4.maas360.com m4.maas360.com.edgekey.net
M6 Instance my.m6.maas360.com m6.maas360.com.edgekey.net
M1 Instance mydevice.maas360.com maas360.com.edgekey.net ** Moved to Dec 2019
my.maas360.com maas360.com.edgekey.nett 
my.m1.maas360.com m1.maas360.com.edgekey.net
M2 Instance my.m2.maas360.com m2.maas360.com.edgekey.net ** Moved to Sept 2019
M3 Instance my.m3.maas360.com m3.maas360.com.edgekey.net ** Moved to Dec 2019
IMPACT : September 20, 2019
End User Portal
Existing MaaS360 Name New Akamai Hostname
M2 Instance my.m2.maas360.com m2.maas360.com.edgekey.net
Services
Existing MaaS360 Name New Akamai Hostname
M4 Instance services.m4.maas360.com:443 m4.maas360.com.edgekey.net **Moved to December 2019
119.81.110.141 (no IP range)
169.38.78.21  
mpns.m4.maas360.com:443 m4.maas360.com.edgekey.net
119.81.110.140 (no IP range)
119.81.173.173  
 
IMPACT : December 2019
Admin Portal
Existing MaaS360 Name New Akamai Hostname
M1 Instance portal.fiberlink.com fiberlink.com.edgekey.net
m1.maas360.com maas360.com.edgekey.net
M2 Instance m2.maas360.com maas360.com.edgekey.net
M3 Instance m3.maas360.com maas360.com.edgekey.net
M4 Instance m4.maas360.com maas360.com.edgekey.net
M6 Instance m6.maas360.com maas360.com.edgekey.net
End User Portal
Existing MaaS360 Name New Akamai Hostname
M1 Instance mydevice.maas360.com maas360.com.edgekey.net
mydevice.fiberlink.com fiberlink.com.edgekey.net 
my.maas360.com maas360.com.edgekey.net
my.m1.maas360.com m1.maas360.com.edgekey.net
M3 Instance my.m3.maas360.com m3.maas360.com.edgekey.net
Services
Existing MaaS360 Name New Akamai Hostname
M1 Instance services.fiberlink.com:443 fiberlink.com.edgekey.net
208.76.128.153 (no IP range)
208.76.130.181  
mpns.maas360.com:443 fiberlink.com.edgekey.net
208.76.128.168 (no IP range)
208.76.131.110  
M2 Instance services.m2.maas360.com:443 m2.maas360.com.edgekey.net
88.205.104.145 (no IP range)
217.112.145.234  
mpns.m2.maas360.com:443 m2.maas360.com.edgekey.net
88.205.104.154 (no IP range)
217.112.145.235  
M3 Instance services.m3.maas360.com:443 m3.maas360.com.edgekey.net
208.76.133.30 (no IP range)
50.204.34.212  
mpns.m3.maas360.com:443 m3.maas360.com.edgekey.net
208.76.133.28 (no IP range)
50.204.34.211  
M4 Instance services.m4.maas360.com:443 m4.maas360.com.edgekey.net
119.81.110.141 (no IP range)
169.38.78.21  
mpns.m4.maas360.com:443 m4.maas360.com.edgekey.net
119.81.110.140 (no IP range)
119.81.173.173  
M6 Instance services.m6.maas360.com:443 m6.maas360.com.edgekey.net
159.8.100.53 (no IP range)
194.98.51.77  
mpns.m6.maas360.com:443 m6.maas360.com.edgekey.net
159.8.100.56 (no IP range)
194.98.51.80  
All Instances internettest.fiberlink.com:80
208.76.128.58
208.76.130.58		 fiberlink.com.edgekey.net
(no IP range)
ACTION
Customers who currently have firewall rules will need to add new Akamai hostnames to firewall rules. 

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSXX","label":"IBM MaaS360"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
26 September 2022

UID

ibm10886803

Page Feedback