I am configuring my company firewall and need the list of IP address ranges (subnets) used by SAP Business Network and SAP Ariba Procurement so I can allow required traffic. Where can I find the current IP addresses and subnets for firewall allowlisting?

Prefer certificate-based allowlisting over IP addresses. You should validate postings using Hypertext Transport Protocol Secure (HTTPS) client certificate validation for service.ariba.com rather than hard-coding IP addresses through your firewall.

If you must allowlist IP ranges, allow the ranges below to support the full set of servers that compose SAP Business Network. These ranges apply to Applicability Statement 2 (AS2) inbound traffic from SAP Business Network to suppliers. The same ranges apply to SAP Ariba solutions such as SAP Ariba Buying and Invoicing and SAP Ariba Sourcing.

• United States

  • 216.109.110.0 to 216.109.111.255
  • 216.109.108.0 to 216.109.109.255
  • 216.109.107.0 to 216.109.107.255
  • 216.109.106.0 to 216.109.106.255
  • 216.109.105.0 to 216.109.105.255
  • 216.109.104.0 to 216.109.104.255

• Europe (Next-Generation Cloud Delivery)

  • 35.204.199.16
  • 34.147.43.114
  • 34.91.77.177
  • 35.204.216.169
  • 34.147.62.167
  • 34.147.10.102
  • 34.90.236.209
  • 35.204.28.17
  • 34.141.218.14
  • 34.147.89.69
  • 34.147.29.30
  • 34.91.195.133
  • 35.204.75.189
  • 34.147.100.165
  • 34.91.149.24
  • 34.90.105.18
  • 34.159.191.55
  • 34.159.251.130
  • 34.159.215.1
  • 34.159.12.244
  • 34.159.147.220
  • 34.141.75.15
  • 34.141.19.245
  • 35.242.212.248
  • 34.107.49.210
  • 34.107.85.53
  • 34.89.201.146
  • 34.159.80.139
  • 34.159.213.97
  • 35.198.73.10
  • 35.242.209.174
  • 35.198.142.164

• Russia

  • 157.133.6.0 to 157.133.6.255
  • 157.133.7.0 to 157.133.7.255
  • 157.133.14.0 to 157.133.14.255

• API developer portals

  • api.ariba.com: 216.109.110.0 to 216.109.111.255
  • openapi.ariba.com: 157.133.208.1 to 157.133.208.255

Ports and firewall behavior

• Use TCP port 443 for HTTPS.
• If your firewall is stateless, also allow return traffic for established connections.

KB0398621 - What are the IP ranges for SAP Integration Suite, managed gateway for spend management and SAP Business Network tenants?

Invoicing
Purchasing
SAP Business Network for Procurement & Supply Chain > Administration (Buyer & Supplier Account Administration)
Spend Visibility
Strategic Contracts
Strategic Sourcing