IP activation required for REST Call Response?

[Meloper]

Hello, this question is more in the general network direction.
I am calling the API of a third-party endpoint.
This endpoint has entered the IP of the ServiceNow instance and this is the only way we can get the data.

If we now get the response from the API call.
Do we have to enter the IP of the endpoint in our whitelist?

So do we need a reciprocal activation for the response or do we only need this if the service behind the endpoint actively wants to request something from us?

Or is it generally the case that if you can read yourself, the answer always comes back the same way, because the source is you yourself, i.e. the initial call?

[Community Alums]

Hi @Meloper ,

Can you please let me know, if you require a secured way of  authentication whenever third-party system tries to retrieve information from the servicenow sytem. If yes, then you can use Oauth2.O.

Also, you can follow the below link which tells about the IP access controls.

https://www.servicenow.com/community/developer-forum/how-to-whiltelist-the-ip-address-in-servicenow/...

Please check and mark this helpful, if it helps.

[Rajesh Chopade1 · Accepted solution]

hi @Meloper 

Since your ServiceNow instance is initiating the outbound request to the third-party endpoint, the third-party service needs to whitelist your ServiceNow instance’s IP to allow communication. This ensures that the third-party endpoint accepts requests coming from the IP address of your ServiceNow instance.

Once the request is made to the third-party endpoint, the response comes back through the same channel (the HTTP or HTTPS connection initiated by ServiceNow). You do not need to explicitly whitelist the third-party's IP for the response, as the response is part of the already established connection. The response follows the path of the initial outbound request, which was initiated by your instance.

Reciprocal whitelisting is only necessary if the third-party endpoint also wants to initiate requests or make a call back to your ServiceNow instance. In such cases, you'd need to whitelist the third-party's IP in your instance’s firewall settings, as the third-party service will be acting as a client to your ServiceNow instance.

i hope my answer helps you to resolve your issue, if yes please mark my answer helpful and correct.

thank you

rajesh

[Meloper]

Thank you!

[Meloper]

DO you know maybe the difference between the IPs in (Support Dashboard) - My IP Informations and the IP in STATS (Backend)?
Also i have the Question, if i call a Rest Message with the use of a MID Server, which IP i need to provide?