Refer to the exhibit.

When integrating Cisco Cloudlock with SaaS platforms like Salesforce, two core authorizations are required: network access and API authorization. In the scenario, Cloudlock has been authorized in Salesforce, and its IP has been allow-listed. However, if access is still denied, the most likely cause is that Salesforce has not been configured to accept traffic from Cloudlock’s IP range — a process handled from the Salesforce admin panel.

To resolve the issue, network access must be explicitly granted to Cloudlock from within Salesforce. This ensures that Salesforce accepts requests initiated by Cloudlock for monitoring and enforcement.