Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Allowlist

    Posted 12 days ago

    Hi, everybody please help with this i need to block all IPs to access to my applicattion but only allow to some IPs. I tried creating a allowlist but still access rest all IP,  I think it could be with a rule deny and allowlist but me confused.

    Thanks


    #CloudWAF(formerlyIncapsula)

    ------------------------------
    osmar murillo
    Security TI
    BOL - Banco Ganadero
    Santa Cruz
    ------------------------------


  • 2.  RE: Allowlist

    Posted 12 days ago

    Hi Osmar,

    I hope you are well.

    You can achieve what you have described by creating an ACL policy and set the policy to block all IP's with the configuration 0.0.0.0/0, then in the exception list you can add the IP's you want to exclude from the ACL. 

    This will block all IP's but allow the IP's listed in your exception to access the site:



    ------------------------------
    Ciaran McAnespy
    Technical User
    Tel Aviv CA
    ------------------------------

    Original Message


  • 3.  RE: Allowlist

    Posted 11 days ago

    Hi, Osmar.

    The method Ciaran described is the recommended method.

    For your clarification, AllowLists will allow any IPs listed to bypass all security policies. 

    This should be used sparingly, and only when absolutely necessary. 



    ------------------------------
    Jaired Anderson
    Imperva
    https://www.imperva.com/
    ------------------------------

    Original Message