Appendix 1. Network settings for interaction with external services

s00.upd.kaspersky.com

s01.upd.kaspersky.com

s02.upd.kaspersky.com

s03.upd.kaspersky.com

s04.upd.kaspersky.com

s05.upd.kaspersky.com

s06.upd.kaspersky.com

s07.upd.kaspersky.com

s08.upd.kaspersky.com

s09.upd.kaspersky.com

s10.upd.kaspersky.com

s11.upd.kaspersky.com

s12.upd.kaspersky.com

s13.upd.kaspersky.com

s14.upd.kaspersky.com

s15.upd.kaspersky.com

s16.upd.kaspersky.com

s17.upd.kaspersky.com

s18.upd.kaspersky.com

s19.upd.kaspersky.com

cm.k.kaspersky-labs.com

HTTPS

443

Updating databases and application software modules.

downloads.upd.kaspersky.com

HTTPS

443

• Updating databases and application software modules.
• Verifying access to Kaspersky servers. If access to the servers using system DNS is not possible, the application uses public DNS. This is necessary to make sure anti-virus databases are updated and the level of security is maintained for the computer. The Kaspersky application uses the following list of public DNS servers in the following order:
  1. Google Public DNS (8.8.8.8).
  2. Cloudflare DNS (1.1.1.1).
  3. Alibaba Cloud DNS (223.6.6.6).
  4. Quad9 DNS (9.9.9.9).
  5. CleanBrowsing (185.228.168.168).

Requests sent by the application may contain addresses of domains and the public IP address of the user because the application establishes a TCP/UDP connection with the DNS server. This information is needed, for example, to validate the certificate of a web resource when using HTTPS. If Kaspersky application is using a public DNS server, data processing is governed by the privacy policy of the relevant service. If you want to prevent Kaspersky application from using a public DNS server, contact Customer Service for a private patch.

touch.kaspersky.com

HTTP

80

• Receiving the trusted time for checking the validity period of the certificate (TLS connection).
• Warning that access to a web resource is denied in the browser when Safe Browsing enabled.

p00.upd.kaspersky.com

p01.upd.kaspersky.com

p02.upd.kaspersky.com

p03.upd.kaspersky.com

p04.upd.kaspersky.com

p05.upd.kaspersky.com

p06.upd.kaspersky.com

p07.upd.kaspersky.com

p08.upd.kaspersky.com

p09.upd.kaspersky.com

p10.upd.kaspersky.com

p11.upd.kaspersky.com

p12.upd.kaspersky.com

p13.upd.kaspersky.com

p14.upd.kaspersky.com

p15.upd.kaspersky.com

p16.upd.kaspersky.com

p17.upd.kaspersky.com

p18.upd.kaspersky.com

p19.upd.kaspersky.com

downloads.kaspersky-labs.com

cm.k.kaspersky-labs.com

HTTPS

80

Updating databases and application software modules.

ds.kaspersky.com

HTTPS

443

Using Kaspersky Security Network.

ksn-a-stat-geo.kaspersky-labs.com

ksn-file-geo.kaspersky-labs.com

ksn-verdict-geo.kaspersky-labs.com

ksn-url-geo.kaspersky-labs.com

ksn-a-p2p-geo.kaspersky-labs.com

ksn-info-geo.kaspersky-labs.com

ksn-cinfo-geo.kaspersky-labs.com

Any

443, 1443

Using Kaspersky Security Network.

click.kaspersky.com

redirect.kaspersky.com

HTTPS

443

Follow links from the interface.

uis.kaspersky.com

center.kaspersky-labs.com

services.ucp.kaspersky-labs.com

ks.ekp.ucp.kaspersky-labs.com

HTTPS

443

Sending requests to My Kaspersky.

0.ucp-ntfy.kaspersky-labs.com

1.ucp-ntfy.kaspersky-labs.com

....

99.ucp-ntfy.kaspersky-labs.com

XMPP over TLS

443

Sending notification messages between the Kaspersky Lab infrastructure and the application.