For sFTP server URL whitelisting (NetSuite -> sFTP server), would it be just our NetSuite domain to be whitelisted, the script's URL, or something else?

Ah, my bad, I see now that IP whitelisting and URL whitelisting are the same thing... Thanks battk