Sophos Heartbeat URL's needed

Hi,

is there a reliable statement for the URL's or IPs needed by the endpoint to make Heartbeat work?

I Need this because in a project there is no default route to the Sophos allowed.