NOcius720147 (Community Member) asked a question.
Hello Veracode team,
I am a beginner in using this tool and I am still learning. Here is my issue. The target URL that I have configured in dynamic analysis is not accessible to the endpoints in my Internal scanning management. I have 4 endpoints with different IP addresses and domain names. Should these four endpoints IP addresses be whitelisted so that my target URL can be accessed successfully to the endpoints?
or this is the IP address 34.195.146.191 that needs to be whitelisted? Because my scan always failed, When I tried to connect to the endpoints using the remote desktop connection and tried to access the target URL in those endpoints, the URL is inaccessible.
As of now, we have sent a request to our dev's firewall/network team to whitelist the 4 ip addresses of our veracode enpoints. I am not sure if this will work.
Thank you.
.png){kind=logo}
Hello @NOcius720147 (Community Member),
There's shouldn't be any whitelisting required as that defeats the purpose of the functionality. The endpoint should be installed on a machine that can reach the target URL. Here's a link to a Help Center article with a diagram that helps illustrate my point: https://help.veracode.com/reader/8~ug4PH~p6J518K17UIM3Q/UDtX1Ozwb7Dgfpr8sR3n7A
It's also worth pointing out that you cannot assign multiple endpoints to any one target URL, so there would be no benefit to having four of them for this task.
Let me know if this answers your question!