What addresses are required for reverse proxy access to CPS? - c06361136

The Service URL should be whitelisted, or more specifically the CPS & IMCAS endpoints (server.com/cps, server.com/ imcas ).

As we are evolving with architectural changes, we will be adding more endpoints and deprecating few. If we whitelist the Service URL, we don't have to worry about the endpoints underneath it

You can look at the access logs under Tomcat and pick the unique ones if absolutely required, but our recommendation is to whitelist the CPS & IMCAS endpoints and allow any requests sent to those addresses.