Static egress IP
Every outbound vendor API call Conduit makes leaves from a single static IP:
20.242.40.128
20.242.40.128Allowlist that address wherever a vendor firewall or API key restricts which source IPs may call it. IT Glue, on-prem ConnectWise Automate, and every other catalog vendor use this same address.
Where to enter it
Section titled “Where to enter it”- IT Glue — IP restrictions are often set on the API key itself
(Account → Settings → API Keys), not only on a network firewall. Add
20.242.40.128on that key if it rejects calls by source IP. See Connect IT Glue. - On-prem ConnectWise Automate — allowlist
20.242.40.128on the Automate server if it enforces IP restrictions. See Connect ConnectWise Automate. - Other vendors — the same address applies to every Conduit outbound vendor API call. See Vendor connections.
When a tunnel is the better fit
Section titled “When a tunnel is the better fit”A tunnel reaches an on-prem system without opening inbound firewall access on your network. Use it when the server is not reachable from the internet at all.
A tunnel does not replace this allowlist for a cloud API that checks the
caller’s source IP. Those calls still leave from 20.242.40.128.
Related
Section titled “Related”- Connect IT Glue to Conduit — allowlist the IP on an IT Glue API key.
- Connect ConnectWise Automate to Conduit — allowlist the IP on an on-prem Automate server.
- Vendor connections — connect, rotate, and troubleshoot vendor credentials.
- Troubleshooting — source-IP rejections and other connection symptoms.
- Tunnels — reach on-prem systems without opening inbound access.
- Security — credential handling and the egress address in the security reference.