I am creating an event subscription for a completed survey topic like surveyengine.completedResponse.SV_…, and created a service like https://ourcompany.com/listener for the subscription URL. Do I need to open that endpoint to all traffic, or does/can/will Qualtrics provide a list of IP ranges or URL patterns we can whitelist in the firewall rules?

In the handful of samples I have tested so far, Qualtrics is sending requestContext.http.sourceIp as 162.247.217.12. But I doubt that specific IP is permanent, and I don’t see any URL.