Skip Navigation
Expand
  • Advanced SearchOpens new dialog
    Enter plus (+) or minus (-) signs in search terms to make a word required or excluded
    Search Tips
    Filter by product
    Filter by category
Getting the IP Address from Intelligent Advisor for Firewall Rules
Answer ID 12863   |   Last Review Date 07/25/2025

Can I get the IP address of incoming web service connection calls from Intelligent Advisor cloud, so I can use it in firewall rules in my on-premises environment?

Environment:
Intelligent Advisor Generation 1
 
Resolution:

Step 1. Look up the two letter code for the region where you production environment is located, and use the following table to understand the domain name of the region:
 
Region TypeRegion Domain Name
Commercialrightnowtech.com
US Govcx.usg.oraclecloud.com
US DoDcx.usd.oraclecloud.com
UK Govcx.ukg.oraclecloud.com

Step 2. Use ping to find out the IP address of <region-code>-nat.<region domain name>. For example, sd for Sydney:

$ ping sd-nat.rightnowtech.com

PING sd-nat.rightnowtech.com (192.29.145.88): 56 data bytes

Step 3. In the inbound firewall rules for the on-premises network, allow communication coming from that IP address.

 
You may also want to add the IP address of the disaster recovery site:
 

Follow the same steps as above, but use the two letter code of the disaster recovery region that corresponds to your production region. E.g. au for Melbourne which is the disaster recovery location for Sydney.

$ ping au-nat.rightnowtech.com

PING au-nat.rightnowtech.com (192.29.209.213): 56 data bytes

 
Important Note: 
If static IP addresses are allowed for the Oracle servers and the IP range happens to change, there might be serious impact to your site. Oracle Cloud Operations can never guarantee that all site related communication will always originate within specific IP addresses. Hardware maintenance, server failover, server rotation, network appliance failover and many other factors can contribute to communications originating from differing IP addresses over time. Additionally, there are times when a site can be migrated to a different pod with considerably varying IP addresses, either to mitigate loading issues or at the customer's request. You must ensure you have a process in place to modify the allowlist as soon as possible should the IP range changes. 
 
For options related to restricting access to your Intelligent Advisor site, see Answer ID 8452: Restricting computers or hosts that can access Oracle Policy Automation Hub, interviews and web service end-points
 
Conclusion:
By following these steps, you can obtain the IP address of incoming web service connection calls from the Intelligent Advisor cloud and configure your firewall rules accordingly. This ensures secure and controlled access to your on-premises environment.