IP Whitelisting
4 min
ip whitelisting is a security feature that allows you to control ip addresses that can access apis it is done using the api trusted host business object by which you can specify a range of trusted host ip addresses or specific host ip addresses that are allowed access to apis this feature is applicable for both rest and soap apis enabling and disabling ip whitelisting you can enable or disable the ip whitelisting feature from the configuration console by default this feature is disabled log in to the > build > global constants to enable set the value field in the api white listing enable option as true to disable set the value field in the api white listing enable option as false if you have enabled the ip whitelisting feature but haven't configured any api trusted host, then all the ip addresses will be allowed access to apis creating a new api trusted host log in to with user role open the api trusted host business object click new api trusted host and enter the following details field description name name of the api trusted host description description for the api trusted host start ip first ip address in the range of the trusted ip addresses end ip last ip address in the range of the trusted ip addresses in case of specifying a single ip address, the start ip address and the end ip address will be the same click save a new api trusted host record is created which allows the configured ip addresses access to apis viewing and modifying an api trusted host log in to with user role open the api trusted host business object the application displays a list of api trusted hosts double click the api trusted host record you wish to modify modify the details as required and click save the api trusted host record is saved with the latest changes deleting an api trusted host log in to with user role open the api trusted host business object the application displays a list of api trusted hosts select the api trusted host record you wish to delete and click delete click yes in the prompt message the selected api trusted host record is deleted and the ip addresses associated with it no longer have access to apis