I need to do PCI security scans of our SCA domains: is there a way to white-list the domains of the scanning service? The scan will be done by Sysnet and the guidance is: “If you use security software such as a firewall in your organization, you may need to white-list the below addresses in order for the scan to run successfully. Otherwise, you may block access to the scan, meaning it will fail. This will result in you being unable to successfully report your compliance.”

Security scanning is not permitted under the Netsuite terms of service. You'll need to contact your account manager requesting auditing details for Netsuite's own security scanning processes instead.