---
article_id: KB0392428
article_type: FAQ
component_ids:
  - BNS-ARI-INV
  - BNS-ARI-PUR
  - BNS-ARI-SC
  - BNS-ARI-SS
  - BNS-ARI-SV
  - SBN-AN-ADM
component_descriptions:
  - Invoicing
  - Purchasing
  - SAP Business Network for Procurement & Supply Chain > Administration (Buyer & Supplier Account Administration)
  - Spend Visibility
  - Strategic Contracts
  - Strategic Sourcing
products:
  - SAP Ariba Procurement, cloud edition
  - SAP Ariba Sourcing, cloud edition
  - SAP Business Network for Procurement and SAP Business Network for Supply Chain
personas:
  - Buyer
  - Supplier
language: en
created: 2026-01-26
updated: 2026-02-03
source: Knowledge Base
url: https://support.ariba.com/item/view/KB0392428
connect_url: https://support.ariba.com/item/view/KB0392428?min=1
sap_for_me_url: https://me.sap.com/notes/KB0392428
---

# How do I find the IP address ranges (subnets) I need to allow for SAP Business Network and SAP Ariba Procurement to pass my firewall?

## Symptom

I am configuring my company firewall and need the list of IP address ranges (subnets) used by SAP Business Network and SAP Ariba Procurement so I can allow required traffic. Where can I find the current IP addresses and subnets for firewall allowlisting?

## Resolution

Prefer certificate-based allowlisting over IP addresses. You should validate postings using Hypertext Transport Protocol Secure (HTTPS) client certificate validation for [service.ariba.com](http://service.ariba.com/) rather than hard-coding IP addresses through your firewall.

If you must allowlist IP ranges, allow the ranges below to support the full set of servers that compose SAP Business Network. These ranges apply to Applicability Statement 2 (AS2) inbound traffic from SAP Business Network to suppliers. The same ranges apply to SAP Ariba solutions such as SAP Ariba Buying and Invoicing and SAP Ariba Sourcing.

- United States
  - 216.109.110.0 to 216.109.111.255
  - 216.109.108.0 to 216.109.109.255
  - 216.109.107.0 to 216.109.107.255
  - 216.109.106.0 to 216.109.106.255
  - 216.109.105.0 to 216.109.105.255
  - 216.109.104.0 to 216.109.104.255
- Europe (Next-Generation Cloud Delivery)
  - 35.204.199.16
  - 34.147.43.114
  - 34.91.77.177
  - 35.204.216.169
  - 34.147.62.167
  - 34.147.10.102
  - 34.90.236.209
  - 35.204.28.17
  - 34.141.218.14
  - 34.147.89.69
  - 34.147.29.30
  - 34.91.195.133
  - 35.204.75.189
  - 34.147.100.165
  - 34.91.149.24
  - 34.90.105.18
  - 34.159.191.55
  - 34.159.251.130
  - 34.159.215.1
  - 34.159.12.244
  - 34.159.147.220
  - 34.141.75.15
  - 34.141.19.245
  - 35.242.212.248
  - 34.107.49.210
  - 34.107.85.53
  - 34.89.201.146
  - 34.159.80.139
  - 34.159.213.97
  - 35.198.73.10
  - 35.242.209.174
  - 35.198.142.164
- Russia
  - 157.133.6.0 to 157.133.6.255
  - 157.133.7.0 to 157.133.7.255
  - 157.133.14.0 to 157.133.14.255
- API developer portals
  - [api.ariba.com](http://api.ariba.com/): 216.109.110.0 to 216.109.111.255
  - [openapi.ariba.com](http://openapi.ariba.com/): 157.133.208.1 to 157.133.208.255

Ports and firewall behavior

- Use TCP port 443 for HTTPS.
- If your firewall is stateless, also allow return traffic for established connections.

## See Also

[KB0398621 - What are the IP ranges for SAP Integration Suite, managed gateway for spend management and SAP Business Network tenants?](https://support.ariba.com/item/view/179560)

## Keywords

IP, firewall, access, range