Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

ThousandEyes for Government: FedRAMP® Moderate

This article supplements the commercial Cisco ThousandEyes documentation, including our API documentation found at Cisco DevNet. It highlights the sections of the product documentation that apply to the Cisco ThousandEyes for Government product, and provides additional guidance applicable only to Cisco ThousandEyes for Government customers.

Getting Support from ThousandEyes

Cisco ThousandEyes for Government customers should use one of the following methods for support:

This support is only for Cisco ThousandEyes for Government customers and meets the US Persons requirements as defined under Title 22, Chapter 69, Sec. 6010 (22 USC 6010). Further information can be found in the Cisco ThousandEyes Support Policy.

ThousandEyes for Government Cookies

The table below describes the cookies collected by the Cisco ThousandEyes for Government instance and applies only to ThousandEyes for Government and users within that instance. For further information, please review Cisco’s Automatic Data Collection Tools (Cookies, etc.).

Cookies for All Users (Authenticated and Unauthenticated)

Cookie Name
Duration & Retention
Host
Cookie Type
Description

_csrf

14 days

app.thousandeyes.us

Strictly Necessary

This cookie is used for Cross-site Request Forgery (CSRF) protection.

JSESSIONID

Session

app.thousandeyes.us

Strictly Necessary

This cookie is used for identity and access management.

route

Session

app.thousandeyes.us

Strictly Necessary

This cookie is used for session affinity for load-balancing.

teUserid

14 days

app.thousandeyes.us

Strictly Necessary

This cookie is used for remember me functionality for the login page.

ThousandEyes for Government Firewall Configuration

The table below provides the ThousandEyes for Government specific firewall configuration rules. These rules are required for the ThousandEyes for Government instance, and replace the commercial documentation, available here: Firewall Configuration for Enterprise Agents.

AWS GovCloud US-EAST1 Infrastructure

Product/Service
DNS Domain Name
IPv4 Addresses
IPv6 Addresses

ThousandEyes Web Application

app.thousandeyes.us

182.30.200.22, 18.253.248.115, 16.65.106.197

2600:1f15:90c:cf03:3a14:8550:415d:2c64, 2600:1f15:90c:cf01:b526:f9bc:7786:88fe, 2600:1f15:90c:cf02:332f:7219:fd80:373b

static.thousandeyes.us

16.64.19.215, 16.65.33.253, 16.65.103.201

2600:1f15:90c:cf02:662d:f883:dafc:b84c, 2600:1f15:90c:cf03:c91e:a814:69f9:23a6, 2600:1f15:90c:cf01:7cb3:1b4:65ec:a71f

ThousandEyes API

api.thousandeyes.us

16.65.51.47, 182.30.57.206, 182.30.80.78

2600:1f15:90c:cf01:3abf:8d89:e5ec:5c92, 2600:1f15:90c:cf03:bf4c:63fd:456f:d6ff, 2600:1f15:90c:cf02:6c38:3890:defa:7ff7

Enterprise Agents

sc1.thousandeyes.us

18.252.164.100, 16.64.58.159, 18.254.246.93

2600:1f15:90c:cf02:ec54:c947:78ed:822e, 2600:1f15:90c:cf01:7867:5811:1a5f:b22c, 2600:1f15:90c:cf03:740a:a315:93b0:7a07

c1.agt.thousandeyes.us

16.65.104.128, 182.30.70.149, 16.64.78.123

2600:1f15:90c:cf03:74ab:5026:d93d:5b86, 2600:1f15:90c:cf02:673f:80c2:5d91:1b3e, 2600:1f15:90c:cf01:edef:f4a1:dd54:59b6

data1.agt.thousandeyes.us

16.64.43.179, 18.254.191.76, 18.254.17.154

2600:1f15:90c:cf03:e424:811d:f45:9540, 2600:1f15:90c:cf01:2f11:185c:1763:847c, 2600:1f15:90c:cf02:6573:af3c:581b:be06

crashreports.thousandeyes.us

18.254.31.241, 182.30.9.172, 18.253.184.82

2600:1f15:90c:cf01:4bcd:becc:f12b:1ca5, 2600:1f15:90c:cf02:f7c7:b2cd:71d5:e6a3, 2600:1f15:90c:cf03:778d:8c8e:1887:d920

Endpoint Agents

c1.eb.thousandeyes.us

16.65.104.146, 16.64.124.153, 18.254.24.56

2600:1f15:90c:cf03:a506:4fa6:52e7:811b, 2600:1f15:90c:cf02:678b:2fcb:730f:13c5, 2600:1f15:90c:cf01:30bb:d65e:2848:518

data.eb.thousandeyes.us

182.30.35.24, 18.252.253.246, 18.254.153.17

2600:1f15:90c:cf01:908b:c147:d26d:5f76, 2600:1f15:90c:cf03:fa67:7818:19e4:abc6, 2600:1f15:90c:cf02:5ac3:8ce8:2a92:55bd

Alerts and Integrations Webhooks

OpenTelemetry (OTel) Source

N/A

16.65.25.153, 18.254.188.65, 18.254.56.208

N/A

Agent Deployment

Cloud Agents

The following Cloud Agents are available in the ThousandEyes for Government product:

Customers may deploy tests for Cloud Agents under a ThousandEyes for Government subscription, but any such deployment would be outside of ThousandEyes’ FedRAMP®-authorized boundary. ThousandEyes' obligations under the Authorization to Operate and the FedRAMP baseline requirements would not apply to the Cloud Agents or the data transmitted to or from the Cloud Agents. Customers are solely responsible for accessing and utilizing the Cloud Agent in accordance with their security policies and applicable FedRAMP and federal compliance requirements.

  • Asia Pacific (ap-northeast-1) (Tokyo)

  • Asia Pacific (ap-northeast-2) (Seoul)

  • Europe (eu-central-1) (Frankfurt)

  • Europe (eu-west-1) (Ireland)

  • Europe (eu-west-2) (London)

  • Europe (eu-west-3) (Paris)

  • US East (us-east-1) (N. Virginia)

  • US East (us-east-2) (Ohio)

  • US West (us-west-1) (N. California)

  • US West (us-west-2) (Oregon)

For more information about Cloud Agents, see Cloud Agents.

Enterprise Agents

You can install Enterprise Agents in ThousandEyes for Government environments using the following deployment methods:

  • Cisco Application Hosting

  • Docker Agent

  • Linux Package

Review all prerequisites and configuration requirements listed below for your deployment type before beginning installation, then use the links provided for the supported devices and installation instructions.

Cisco Application Hosting

Prerequisites

  • Host device is FIPS-compliant.

  • NTP enabled on the device.

Configuration

To configure a ThousandEyes Enterprise Agent for a Cisco ThousandEyes for Government environment, you must add the following environment variable when configuring the Enterprise Agent:

Refer to the links below for a list of supported devices and links to the relevant Cisco Application Hosting installation instructions:

Docker Agent

Prerequisites

  • Host device is FIPS-compliant.

  • NTP enabled on the device.

  • Baseline OS configuration must meet NIST 800-53 or DoD STIG.

Configuration

To configure a ThousandEyes Enterprise Agent for Cisco ThousandEyes for Government, you must add the following environment variable when configuring the Enterprise Agent:

For installation instructions, see Docker-Based Agent Installation.

Linux Package

Prerequisites

  • FIPS-compatible OpenSSL installed on the device with FIPS-mode enabled on the system.

  • NTP enabled on the device.

  • Baseline OS configuration must meet NIST 800-53 or DoD STIG.

Configuration

To configure a ThousandEyes Linux-Based Enterprise Agent for Cisco ThousandEyes for Government, you must add the -m advanced option to the installation script, and set the value to FEDRAMP:

Using FIPS mode or FEDRAMP mode requires the host OS to support OpenSSL 3.0 or higher with a FIPS-validated OpenSSL configuration. The agent will fail and log the error without it.

For installation instructions, see Linux Package Installation.

For the list of advanced configuration options, see Linux Package Advanced Options.

Endpoint Agents

Transfer of Agents across Regions

FedRAMP compliant organizations cannot transfer agents across different regions using the connection string.

For more information, see Transfer Ownership Across Different Regions Using Connection Strings.

ThousandEyes AI Features

AI Features are not available for ThousandEyes for Government. Refer to the ThousandEyes MCP Server documentation below for available options to connect your own AI client or assistant to the ThousandEyes platform.

Cloud and Enterprise Agent Settings

BrowserBot is not available in the ThousandEyes for Government instance.

For more information, see Enterprise Agent Settings.

Cloud and Enterprise Agent Tests

Browser tests, including page load and transaction tests, are not available in the ThousandEyes for Government instance.

Dashboards

Email support for scheduled snapshots is not available in the ThousandEyes for Government instance.

For more information, see Scheduling a Recurring Snapshot.

Embedded widgets and shared dashboard snapshots are not available in the ThousandEyes for Government instance.

Snapshots

Public snapshots are not available in the ThousandEyes for Government instance.

Path Visualization

Cloud network enrichments for the path visualization are not available in the ThousandEyes for Government instance.

Event Detection

Event Summarization using Large Language Models (LLMs) is not available in the ThousandEyes for Government instance. This impacts both event summaries and recurring event summaries.

For more information, see Event Detection.

Integrations

ThousandEyes MCP Server

To access the ThousandEyes MCP server from the ThousandEyes for Government instance, set the Remote MCP server URL to https://api.thousandeyes.us/mcp.

The following tools are not available in the ThousandEyes for Government instance:

  • Search Outages

  • Get Cloud Insights Events Analysis Inputs

  • List Cloud Insights Inventory

  • Resolve Cloud Insights Entity Filters

  • Get Cloud Insights Metrics

  • Get Connected Device

In addition, the following test types are not available for the Instant Tests tool in the ThousandEyes for Government Instance:

  • Page Load

  • Transaction

  • API

For more information, see ThousandEyes MCP Server.

Microsoft Teams Integration

The Microsoft Teams Call Quality Dashboard integration is not available in the ThousandEyes for Government instance.

ThousandEyes for OpenTelemetry

ThousandEyes for OpenTelemetry is available in the ThousandEyes for Government instance with the following limitations:

  • Traces are not available.

  • OTel-based integrations that rely on connectors and operations are not available, including:

    • Splunk Cloud Platform HEC

    • Splunk Enterprise HEC

    • Splunk Observability APM

    • Dynatrace Observability APM

While the ThousandEyes OpenTelemetry integration can be deployed under a ThousandEyes for Government subscription, the deployment will be outside of the ThousandEyes' FedRAMP-authorized boundary. ThousandEyes' obligations under the Authorization to Operate and the FedRAMP baseline requirements would not apply to this integration or the data once it leaves for the OpenTelemetry target. You are solely responsible for deploying to the OpenTelemetry target in accordance with your security policies and applicable FedRAMP and federal compliance requirements.

For more information about ThousandEyes for OpenTelemetry, see ThousandEyes for OpenTelemetry.

Alert Integrations

Webhooks (including custom webhooks) are not available in the ThousandEyes for Government instance for alert notifications.

Alerts

The following alert sources are not available in the ThousandEyes for Government instance:

  • Cloud Insights

  • Internet Insights

  • WAN Insights

In addition, the following Network & App Synthetics alert rule types are not available in the ThousandEyes for Government instance:

  • Web - Page Load

  • Web - Transaction

  • Web - Transaction (Classic)

For more information, see Creating and Editing Alert Rules and Default Alert Rules.

Insights Portfolio

The entire Insights portfolio is not available in the ThousandEyes for Government instance. That includes:

  • Cloud Insights

  • Traffic Insights

  • WAN Insights

  • Internet Insights

For more information, see Cloud Insights, Enterprise Traffic Insights, WAN Insights, and Internet Insights.

APIs

ThousandEyes for Government users should only use the api.thousandeyes.us URI when calling APIs. Users are solely responsible for accessing APIs in accordance with their security policies and applicable FedRAMP and federal compliance requirements.

The following APIs are not available for ThousandEyes for Government:

APIs:

  • Cloud Insights

  • Internet Insights

  • Emulation

  • Credentials

API Operations:

  • Within Tests API:

    • Page Load Tests.

    • API Tests.

    • Web Transaction Tests.

  • Within Endpoint Agents API:

    • Endpoint Agents Transfer.

  • Within Templates API:

    • API operations for the creation or retrieval of API tests, page load tests, or transaction tests are not available for ThousandEyes for Government.

  • Within Alerts API:

    • API operations for the creation or retrieval of API, page load, or web transaction alert rules are not available for ThousandEyes for Government.

  • Within BGP Monitors API:

    • Private monitor data is not available for ThousandEyes for Government.

PreviousMonitoring Zoom
Next2025

Last updated