When connecting to an on-premises SMTP server from Saviynt's SC2.0 server, you generally need to whitelist the IP address or CIDR range used by Saviynt for outgoing connections. Here’s how to decide which IP addresses to whitelist:
Specific IP Address of SC2.0 Server:
- When to Use: If Saviynt provides a static IP address for the SC2.0 server or if you have a specific IP that you know is used for outbound SMTP connections, you should whitelist that specific IP address.
- Benefits: It limits the exposure to only the necessary IP, enhancing security by reducing the range of IPs that have access to your SMTP server.
Saviynt's CIDR Range:
- When to Use: If Saviynt uses a range of IP addresses for their services or if the IP address of the SC2.0 server is dynamic and can change, you may need to whitelist the entire CIDR range provided by Saviynt.
- Benefits: It ensures that even if the IP address changes, the connection will still be permitted. However, it broadens the scope of allowed IPs, which might pose a higher security risk.
Recommendation:
- Check with Saviynt Support: They can provide the most accurate information about the IP address or CIDR range used for SMTP connections from SC2.0. This is important because whitelisting a range or specific IPs might depend on your specific setup and Saviynt’s network configuration.
- Security Consideration: Always prefer whitelisting the specific IP address if available. If not, whitelist the CIDR range but monitor and manage the security implications carefully.
In summary, if you have a specific IP address, that is often the preferred choice due to its more precise control. If not, use the CIDR range and ensure you understand and manage the potential security risks.
Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.
