@adam not sure if this applies to REST, but there is a webservices only configuration

Thats initially what I thought, but it ended up being off on the role we were using. Could there be something in the security settings? Can you block restlets but not suitetalk for certain IPs?

I’m not very familiar with that area, but I would be inclined to say no, you probably do not have that level of control

The web service only configuration is indeed the solution. It will block rest access and allow only suitetalk connections.