Your comments

Just want to add these 2 threads are slightly different.  One is restrict to IPs, where as the other one is the end-point connecting back to the cloudhosted environment.  Different vendors block all unknown traffic, so our IT Teams can't connect to these users because your cloudhosted IPs change too frequently to get them to update whitelist's all the time.