How to whitelist Microsoft flow IP address for my FTP server

[MarkRomera]

Hi,

I am making a flow to create a file from my google drive folder to my FTP server.

So each time a new file is added to the google drive folder it must be created on the FTP server as well.

We need to white list the IP addres form Microsoft flow to be able to contact our FTP server.

Any one an idea which IP address or range we should take?

Or does any one else have a flow for these actions? Or how to save specific email attachments form new mail in outlook to FTP

Thx,

Mark

[v-yamao-msft]

Hi @MarkRomera,

Have you created the FPT connection successfully?

To connector to your FTP account, you will need Server Address, User name, Password, FTP server Port, etc. Please check the following doc for more details:

https://docs.microsoft.com/en-us/connectors/ftp/

After the connection to FTP created, it will be able to create a flow to save files from Google Drive to FTP Server.

Best regards,

Mabel Mao

[dfit]

Mabel, this doesn't help. We need to know the IP address(es) or range(s) that Flow uses so we can whitelist them.

We have the same issue – all our FTP servers are locked down for security, access is by whitelist only.

[Anonymous]

@dfit

I think this may be what you're after:

https://docs.microsoft.com/en-us/flow/limits-and-config

[dfit]

@Anonymous Amazing! Thanks so much. Searched and didn't find that resource page for some reason.

[Turja]

This is not helping ? We need the CIDR range and the port to open NSG(s) in Azure to let Microsoft Flow to access my subnet?

How to implement that?

This is the extract from the link provided : 

IP address configuration

The IP address from which Microsoft Flow requests are sent depends on the region where the environment that contains the flow is located. We don't currently publish FQDNs available for flow scenarios.

[Tyrrell94]

Did anyone ever figure out which IP we would need to whitelist? 

[LouO]

Requests to my service came from 40.118.244.241

That is not in any range listed on the configs page for power automate.

https://docs.microsoft.com/en-us/power-automate/limits-and-config#ip-addresses

Not sure how I can enforce access restrictions if data isn't accurate.

[LouO]

Well, there is a kind of solution, but it's not very nice.

From here:
https://docs.microsoft.com/en-us/power-platform/admin/online-requirements#ip-addresses-and-urls

You can find a (probably?) complete list of Azure IPs for different clouds (Public, Gov, Germany, etc)
From there you can download a huge (~70k lines for Public Cloud) JSON file with all Azure IPs. It's split by service tag so, for example you can get the current IPs for LogicApps.UKSouth

    {

      "name": "LogicApps.UKSouth",

      "id": "LogicApps.UKSouth",

      "properties": {

        "changeNumber": 1,

        "region": "uksouth",

        "regionId": 27,

        "platform": "Azure",

        "systemService": "LogicApps",

        "addressPrefixes": [

          "51.104.9.112/28",

          "51.105.69.96/27",

          "51.140.28.225/32",

          "51.140.73.85/32",

          "51.140.74.14/32",

          "51.140.78.44/32",

          "51.140.78.71/32",

          "51.140.79.109/32",

          "51.140.84.39/32",

          "51.140.137.190/32",

          "51.140.142.28/32",

          "51.140.153.135/32",

          "51.140.155.81/32",

          "51.140.158.24/32",

          "2603:1020:705:402::3c0/124",

          "2603:1020:705:402::3e0/123"

        ],

        "networkFeatures": null

      }

    },