cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Network Block or IP Allow List for FlexNet Operations Cloud

Network Block or IP Allow List for FlexNet Operations Cloud

Introduction

This article provides the FlexNet Operations Cloud IP addresses for network block or IP address allow list.

Need to Know

A new set of network blocks is being used by FlexNet Operations Cloud services. The networks block addresses differ based on the deployment environment your FlexNet Operations Cloud is hosted on.

We are migrating from the following legacy IP blocks referred in the table below. Please add the new IP blocks documented in the Best Practices section based on your FlexNet Operations instance and its deployment region.

Legacy IP address blocks (for reference)
Environment IPv4 Blocks IPv6 Blocks
Production 64.14.29.0/24 2620:122:f001:1163::/64
UAT 64.14.29.0/24 2620:122:f001:1163::/64
Disaster Recovery (DR) 64.27.162.0/24 2620:122:f001:1163::1/128

Best Practices

If you use an IP allow list, we advise using IP blocks instead of individual IP addresses as the IP addresses for a given connection may change from one call to the next. We strongly recommend sharing the following IP blocks with your IT team to add to your network block.

For FlexNet Operations Cloud ALM instances:

IPv4:

  • AWS NAM: 185.146.155.0/24

IPv6:

  • AWS NAM: 2620:122:f003::/48

-OR-

Deployment Region Environment IPv4 Blocks IPv6 Blocks
AWS NAM Production 185.146.155.64/27 2620:122:f005::/56
UAT 185.146.155.0/27 2620:122:f003::/56
Production Copy Service (PCS) 185.146.155.32/27 2620:122:f004::/56
AWS EU Production 185.146.152.64/27 2a07:4f80:20:200::/56
UAT 185.146.152.0/27 2a07:4f80:20::/56

NOTE: It is no longer necessary to specify an IP address block for the Disaster Recovery (DR) environment.

For FlexNet Operations Cloud LLM instances:

We are in the process of migrating FlexNet Operations LLM to AWS. We advise adding the following IP blocks to your network block to prepare for the upcoming migration.

IPv4:

  • AWS NAM: 185.146.155.0/24

IPv6:

  • AWS NAM: 2620:122:f003::/48

-OR-

Deployment Region Environment IPv4 Blocks IPv6 Blocks
AWS NAM Production 185.146.155.64/27 2620:122:f005::/56
UAT 185.146.155.0/27 2620:122:f003::/56
Production Copy Service (PCS) 185.146.155.32/27 2620:122:f004::/56

NOTE: It is no longer necessary to specify an IP address block for the Disaster Recovery (DR) environment.


Frequently Asked Questions

Understanding IP Allow Listing for FlexNet Operations Cloud

Q: Why do we need to allow list these blocks?

A: If your organization, or your customers, operate strict firewall rules then you should allow these IP address blocks.

Q: Who should we speak to about allow listing?

A: You should discuss your needs with your IT administrators, who typically maintain these allow list rules. If you require further information, please contact Revenera Technical Support.

Q: Which FlexNet Operations Cloud services are affected if an allow list is configured?

A: All services can be impacted if you are using an allow list. Examples include:

  • Your employees connecting to the Producer Portal UI
  • Your end customers connecting to the Customer Portal UI
  • Your CRM system calls FNO Web Services
  • Your end customers' devices or Local License Servers making call-home or synchronization connections to FNO
  • Your end customers' devices connecting to Cloud License Servers to make Capability Requests

Q: Why do we need to configure an entire block – can't we just allow the IP address associated with the end point we use?

A: Our advice has always been to configure the block. When we move to AWS, this is even more important, because AWS does not allocate static IP addresses; the IP address allocated to a URL can change dynamically.

Understanding the AWS Migration's Affect on FlexNet Operations Cloud Allow Listing

Q: When will these changes take place?

A: The IP addresses were assigned on 2022-11-23 and as FlexNet Operations services were migrated over to the new AWS environment, we reminded customers to add these IP blocks to their network block to ensure continued access to FlexNet Operations services.

Q: Why can't you continue to use the old IP address blocks indefinitely instead of using the new IP address blocks?

A: Using the legacy IP address blocks involves complex routing rules which will impact performance, and so we must move to the new blocks  as part of the AWS migration.

Q: What will happen if the addresses are not added to the allow list?

A: If you or your customers impose strict firewalls rules, FlexNet Operations and its services may not be accessible.

Labels (4)
Was this article helpful? Yes No
100% helpful (2/2)
Comments

Could you also provide a list of tcp-ports that are used and should be 'open' on the client side ?

Hi,

We are whitelisting these URls in Firewalls 

1. https://flex<ID>.compliance.flexnetoperations.com/deviceservices

2. https://flex<ID>.compliance.flexnetoperations.com

Do we also need to do any changes ?

 

Hello Revenera Team,

Can you fill below details and share us which applies for new Link?

Domain: https://<Production>.compliance.flexnetoperations.com/api/1.0/health

Protocol: 

Port: 

IP Address Block Ranges:

IPv4: 185.146.155.0/24
IPv6: 2620:122:f003::/48

Thanks!

Hi @Lakshminarayana the URL would be your https://flex<TenantID>.compliance.flexnetoperations.com/api/1.0/health 

Protocol: https  and Port 443, yes the IPv4 and IPv6 has to be open for traffic. 

Best Regards,

Version history
Last update:
‎Dec 19, 2023 12:59 PM
Updated by:
Contributors