topic Open internal application server access to the mongo cloud tcp in General Topics

Open internal application server access to the mongo cloud tcp

farshadhadei — Tue, 14 Nov 2023 16:25:27 GMT

does anyone know how to open port 27017/TCP from our internal application server to the mongo cloud *.mongodb.net?

Re: Open internal application server access to the mongo cloud tcp

JayGolf — Tue, 14 Nov 2023 20:34:58 GMT

Can you describe the current policy you have created or share a screenshot? Are you currently hitting one of the default security policies? In the monitor tab, what does the traffic look like?

You can create a Custom URL Category with type URL List. In the list you can add URLs with wildcards. Once created, you can create a security policy with the source being your internal application and the source zone of where the internal app server lives. Under application, you can also add the mongodb application. In the destination zone, you can select your untrust or internet zone. You can keep destination addresses to any. Then, in URL Category you can select the custom URL category that you previously created (that includes the wildcard mongodb url).

Re: Open internal application server access to the mongo cloud tcp

farshadhadei — Wed, 15 Nov 2023 06:31:38 GMT

thanks @JayGolf , the solution works overall, however our security team doesn't open any outside, they only want to open to *.mongodb.net