Unable to configure CloudSOC to manage specific IP's from the SaaS

Products

• CASB Security Standard
• CASB Security Premium
• CASB Security Advanced
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced

Issue/Introduction

Configured the CloudSOC per documentation and confirmed everything worked as designed. However, once the IP Whitelisting was implemented; CloudSOC processes failed to work as designed.

Cause

IP ranges are dynamic from all SaaS Server Farms. 
With the majority of these Server Farms being dynamically modified every month by the SaaS provider.

Resolution

Working as designed.

CloudSOC Dev Team recommends not using IP Whitelisting for Securlets. However, if needed, please contact the SaaS Provider for the IP listing or IP Range to be cleared.

The following SaaS applications may be used at time of posting for additional insight on those items.

• Amazon Web Service:
  • Review AWS IP Address Ranges
  • Specific IP's Per Server Name
     
• ServiceNow:
  • Settings within the SaaS to whitelist need to be implemented per provider outside CloudSOC
  • Added documentation from provider: Configure an IP address range for the MID Server
     
• WorkDay:
  • Settings within the SaaS to whitelist need to be implemented per provider outside CloudSOC