The standard way is to periodically fetch and update unless your firewall gives you an API to work with. You could also register static ips for your server so the whitelisting is one and done.