Collapse
Submit a Service Request
Contact Information for Technical Support
My Service Notifications
Getting the IP Address from Intelligent Advisor for Firewall Rules
Answer ID 12863 |
Last Review Date 07/25/2025
Can I get the IP address of incoming web service connection calls from Intelligent Advisor cloud, so I can use it in firewall rules in my on-premises environment?
Environment:
Intelligent Advisor Generation 1
Resolution:
Step 1. Look up the two letter code for the region where you production environment is located, and use the following table to understand the domain name of the region:
| Region Type | Region Domain Name |
|---|---|
| Commercial | rightnowtech.com |
| US Gov | cx.usg.oraclecloud.com |
| US DoD | cx.usd.oraclecloud.com |
| UK Gov | cx.ukg.oraclecloud.com |
Step 2. Use ping to find out the IP address of <region-code>-nat.<region domain name>. For example, sd for Sydney:
$ ping sd-nat.rightnowtech.com
PING sd-nat.rightnowtech.com (192.29.145.88): 56 data bytes
Step 3. In the inbound firewall rules for the on-premises network, allow communication coming from that IP address.
You may also want to add the IP address of the disaster recovery site:
Follow the same steps as above, but use the two letter code of the disaster recovery region that corresponds to your production region. E.g. au for Melbourne which is the disaster recovery location for Sydney.
$ ping au-nat.rightnowtech.com
PING au-nat.rightnowtech.com (192.29.209.213): 56 data bytes
Important Note:
If static IP addresses are allowed for the Oracle servers and the IP range happens to change, there might be serious impact to your site. Oracle Cloud Operations can never guarantee that all site related communication will always originate within specific IP addresses. Hardware maintenance, server failover, server rotation, network appliance failover and many other factors can contribute to communications originating from differing IP addresses over time. Additionally, there are times when a site can be migrated to a different pod with considerably varying IP addresses, either to mitigate loading issues or at the customer's request. You must ensure you have a process in place to modify the allowlist as soon as possible should the IP range changes.
For options related to restricting access to your Intelligent Advisor site, see Answer ID 8452: Restricting computers or hosts that can access Oracle Policy Automation Hub, interviews and web service end-points
Conclusion:
By following these steps, you can obtain the IP address of incoming web service connection calls from the Intelligent Advisor cloud and configure your firewall rules accordingly. This ensures secure and controlled access to your on-premises environment.
By following these steps, you can obtain the IP address of incoming web service connection calls from the Intelligent Advisor cloud and configure your firewall rules accordingly. This ensures secure and controlled access to your on-premises environment.
