What's needed to be open when using IP Address Access Control with Update SetSummaryYou may want to block all IP Addresses from accessing ServiceNow except for you internal network or VPN. Once setting up Deny for 0.0.0.0 255.255.255.255 it prevent update sets from working correctly.InstructionsIf IP address access control is enabled on the source instance or the source instance resides in a different datacenter than the target instance, complete these tasks before transferring an update set: You can go to the HI portal to get the ip addresses https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0538621 On the source instance, navigate to System Security IP Address Access Control.Add the IP address from step one as an exception.More Access exception maybe shown in the node logs. Example: 2021-01-12 14:48:08 (326) Default-thread-13 CA3AF5AFDB29A410AB6AD5CDD39619A8 txid=785a312fdb29 WARNING *** WARNING *** SysLogWarnLogger: OUTBOUND IP BLOCKED: 104.93.150.244:80 not authorized 2021-01-12 14:48:08 (328) Default-thread-13 CA3AF5AFDB29A410AB6AD5CDD39619A8 txid=785a312fdb29 WARNING *** WARNING *** java.lang.SecurityException: 104.93.150.244:80 not authorized You can run nslookup on the ip address and find that it's related to a Name Server. Add the name server in the allow list. ServiceNow does require the lookup of the target instance ip address for the update set. nslookup 104.93.150.244 244.150.93.104.in-addr.arpa name = a104-93-150-244.deploy.static.akamaitechnologies.com. Authoritative answers can be found from: 93.104.in-addr.arpa nameserver = ns3.reverse.deploy.akamaitechnologies.com. 93.104.in-addr.arpa nameserver = ns8.reverse.deploy.akamaitechnologies.com. 93.104.in-addr.arpa nameserver = ns2.reverse.deploy.akamaitechnologies.com. 93.104.in-addr.arpa nameserver = ns6.reverse.deploy.akamaitechnologies.com. 93.104.in-addr.arpa nameserver = ns4.reverse.deploy.akamaitechnologies.com. 93.104.in-addr.arpa nameserver = ns7.reverse.deploy.akamaitechnologies.com. 93.104.in-addr.arpa nameserver = ns1.reverse.deploy.akamaitechnologies.com. 93.104.in-addr.arpa nameserver = ns5.reverse.deploy.akamaitechnologies.com. ns7.reverse.deploy.akamaitechnologies.com internet address = 184.26.161.32 ns5.reverse.deploy.akamaitechnologies.com internet address = 95.100.173.32 ns3.reverse.deploy.akamaitechnologies.com internet address = 23.74.25.32 ns1.reverse.deploy.akamaitechnologies.com internet address = 96.7.50.32 ns4.reverse.deploy.akamaitechnologies.com internet address = 95.100.168.32 ns6.reverse.deploy.akamaitechnologies.com internet address = 23.61.199.32 ns2.reverse.deploy.akamaitechnologies.com internet address = 2.16.40.32 ns8.reverse.deploy.akamaitechnologies.com internet address = 2.22.230.32