Open internal application server access to the mongo cloud tcp

[farshadhadei]

 does anyone know how to open port 27017/TCP from our internal application server to the mongo cloud *.mongodb.net?

[JayGolf]

Hi @farshadhadei ,

Can you describe the current policy you have created or share a screenshot? Are you currently hitting one of the default security policies? In the monitor tab, what does the traffic look like? 

You can create a Custom URL Category with type URL List. In the list you can add URLs with wildcards. Once created, you can create a security policy with the source being your internal application and the source zone of where the internal app server lives. Under application, you can also add the mongodb application. In the destination zone, you can select your untrust or internet zone. You can keep destination addresses to any. Then, in URL Category you can select the custom URL category that you previously created (that includes the wildcard mongodb url). 

[farshadhadei]

thanks @JayGolf , the solution works overall, however our security team doesn't open any outside, they only want to open to *.mongodb.net