# Azure Notifications via webhook - Source IPs? **URL:** \ **Category:** Cloud platforms\ **Tags:** webhook, azure\ **Created:** [June 4, 2025, 11:42am UTC](https://community.dynatrace.com/t/azure-notifications-via-webhook-source-ips/51934 "2025-06-04T11:42:52Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Theodore\_x86](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/theodore_x86/32/17620_2.png) [@Theodore\_x86](https://community.dynatrace.com/u/Theodore_x86)\ **Post date:** [June 4, 2025, 11:42am UTC](https://community.dynatrace.com/t/azure-notifications-via-webhook-source-ips/51934/1 "2025-06-04T11:42:52Z")
Hello. We are using DYNATRACE MANAGED and we want to create the ingestion below: > **[Configure Azure Monitor alerts via webhook - Set up monitoring notifications...](https://docs.dynatrace.com/managed/ingest-from/microsoft-azure-services/azure-integrations/azure-monitoring-guide/set-up-monitoring-with-azure-alerts#step-3)** > > After setting up Azure Monitor integration, you can start setting up monitoring notifications with Azure Monitor alerts. | Integration with Azure Monitor alerts and supported Azure Monitor alerts types There is a way to unravel the source IPs (public IPs from AZURE), but what happens if they change dynamically. This is an inbound traffic so security has to apply specific rules from source IPs. Has anyone faced the same issue? Thanks! ---
**Author:** ![Yosi\_Neuman](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/yosi_neuman/32/9845_2.png) [@Yosi\_Neuman](https://community.dynatrace.com/u/Yosi_Neuman)\ **Post date:** [June 6, 2025, 8:00am UTC](https://community.dynatrace.com/t/azure-notifications-via-webhook-source-ips/51934/2 "2025-06-06T08:00:31Z")
Hi [@Theodore\_x86](https://community.dynatrace.com/user/50066) Maybe you can ask security team to use the uri path (i.e. /modules/azure\_monitoring/alerts\_webhook) together with the token parameter value to be added to the allow list requests for all ips? HTH Yos ---
**Author:** ![Theodore\_x86](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/theodore_x86/32/17620_2.png) [@Theodore\_x86](https://community.dynatrace.com/u/Theodore_x86)\ **Post date:** [June 10, 2025, 9:58am UTC](https://community.dynatrace.com/t/azure-notifications-via-webhook-source-ips/51934/3 "2025-06-10T09:58:41Z")
Thanks for the reply [@Yosi\_Neuman](https://community.dynatrace.com/user/6931). I think that the security will not accept to allow requests from any public IP, filtering with just the endpoint name. Security-wise this introduces a vulnerable entry point. If someone has implemented this, maybe would suggest how he/she dealt with the network. BR ---
**Author:** ![kayjayeff1](https://avatars.discourse-cdn.com/v4/letter/k/13edae/32.png) [@kayjayeff1](https://community.dynatrace.com/u/kayjayeff1)\ **Post date:** [June 10, 2025, 11:28am UTC](https://community.dynatrace.com/t/azure-notifications-via-webhook-source-ips/51934/4 "2025-06-10T11:28:16Z")
[@Theodore\_x86](https://community.dynatrace.com/user/50066) each Azure service generally has a list of public IPs you can use to put into a firewall config for on-prem.  I believe it would be region based as well.  Take a look at [this link for Azure Monitor](https://docs.azure.cn/en-us/azure-monitor/app/ip-addresses). It references a [JSON file with IPs](https://docs.azure.cn/en-us/azure-monitor/app/ip-addresses#ip-addresses) that are updated weekly. ---
**Author:** ![Theodore\_x86](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/theodore_x86/32/17620_2.png) [@Theodore\_x86](https://community.dynatrace.com/u/Theodore_x86)\ **Post date:** [June 10, 2025, 1:39pm UTC](https://community.dynatrace.com/t/azure-notifications-via-webhook-source-ips/51934/5 "2025-06-10T13:39:01Z")
Yes [@kayjayeff1](https://community.dynatrace.com/user/76616), but this is preciacly the problem. That those IP change from time to time and so the Security needs to update each time the configuration. I cannot see any other solution other than allowing every IP to send a webhook to the activegate which is a not secure way to go. BR ---
**Author:** ![kayjayeff1](https://avatars.discourse-cdn.com/v4/letter/k/13edae/32.png) [@kayjayeff1](https://community.dynatrace.com/u/kayjayeff1)\ **Post date:** [June 10, 2025, 1:41pm UTC](https://community.dynatrace.com/t/azure-notifications-via-webhook-source-ips/51934/6 "2025-06-10T13:41:35Z")
Well, they COULD change, but they probably do not change that often.  I have dealt with similar concerns in the past.  I am not sure you have other options.  You could check with Azure tech support on this, but I think they will tell you to do the same.