Skip to main content

Best practices for ISM gateway management

Veracode recommends that you comply with these best practices for managing your gateway to make the most effective use of Veracode Internal Scanning Management (ISM).

Add all of your endpoints to the same gateway.​

A single gateway is sufficient for connecting all of your endpoints to the Veracode cloud for scanning. There are no performance benefits to using multiple gateways.

If the endpoint cannot connect to the gateway, allow the gateway IP address.​

If an endpoint fails to connect to your gateway after you install the endpoint, your organization may need to add the gateway IP address to your allowlist.

Monitor emails you receive from Veracode about your gateway.​

Veracode sends an email notifying you if your gateway goes offline and comes back online. If you have Dynamic Analyses in progress when the gateway goes offline, you need to restart them when it comes back online.

You can also monitor the status of your gateway by opening ISM in the Veracode Platform.