Anyone have experience with connecting to an exter...
# suitescriptc
Chris
05/18/2022, 12:04 AMAnyone have experience with connecting to an external SFTP when an IP/Port is required?
Recently we have gotten away with adding the IP address to the approved list, but with the move to OCI I believe the IP changed again. Our Infosec team wants us to come up with a longer term solution to resolve this. However they will not allow an SFTP to be open to the internet and require an IP/Port for network connectivity. However it appears NS is not able to provide an IP list.
Has anyone else had to deal with a situation like this? Without an IP/Port I am not aware how any of the recommended solutions would work. The files need to be PGP encrypted and as of right now that all occurs when the files get to the SFTP since there were difficulties getting it working within NS.
p
Phillip
05/18/2022, 12:23 AMThis may require a middleware tool. I am unsure if you can do ftp whitelisting through a NetSuite script
c
Chris
05/18/2022, 12:29 AMok. yea it feels like we are stuck. Our IT won't allow connection without an IP and Netsuite doesn't provide IPs.
However if we find out there are no other options besides middleware maybe we will be able to get something done.
p
Phillip
05/18/2022, 12:30 AMI prefer the middleware solution because tools like boomi can pgp encrypt the file for you
c
Chris
05/18/2022, 12:33 AMyea I think we have been dealing with some many integration issues we are at the point to where we are looking at Boomi or something else
Chris
05/18/2022, 12:33 AMSo i guess it works out because it's just another reason to get one
b
battk
05/18/2022, 12:50 AMNetSuite IP Addresses describes how netsuite publishes their outbound ip address
c
Chris
05/18/2022, 1:26 AMWhere exactly? It sounds like it says they don't publish their ips
b
battk
05/18/2022, 1:27 AMyou probably want to read all their warning and alternatives
battk
05/18/2022, 1:27 AMbut there is a line you can find with
outboundipsc
Chris
05/18/2022, 1:34 AMI have read this page and sent it to our infosec team, but they made it sound like none of these solutions would work.
b
battk
05/18/2022, 1:43 AMdepends on if they can configure their firewall / sftp server to lookup ips
battk
05/18/2022, 1:44 AMfor example, you can see which ips netsuite is using right now by using
Copy code
nslookup <http://outboundips.netsuite.com|outboundips.netsuite.com>c
Chris
05/18/2022, 1:49 AMyea I asked and they said they aren't using a firewall in front of the server, but maybe we could use a lambda function to query and update . However they didn't know if InfoSec would approve it.
Chris
05/18/2022, 2:04 AMok so infosec got back to me when I mentioned that outboundips.netsuite.com specifically and the good news is they see the ip that it changed to, but the problem is they may change randomly.
b
battk
05/18/2022, 2:05 AMit will change whenever netsuite feels like they need another server
battk
05/18/2022, 2:06 AMso their sftp server would need to be able to lookup ip addresses from domain names, or the more likely reverse lookup domain name from ip address
battk
05/18/2022, 2:06 AMits more likely to get that from a firewall than a sftp server
c
Chris
05/18/2022, 2:11 AMyea that's the same thing they mentioned so hopefully we figure out a solution. at least now we can get a confirmed list of IPs because without that they wouldn't even add the one I mentioned