Fortiweb cloud locations question

Hi,

We have deployed Fortiweb cloud with web apps deployed in the azure UK south region.

1. The IP address of the cname during setup refers to an Azure data centre in Holland, not the UK - is this normal routing?

2. Is there a list of source Ip addresses that the proxied request will come from? This will allow us to lock down our azure web app to only receive traffic from fortiweb thereby stopping users from going direct.

Thanks,

jason