🌐
Portal Docs
  • ✨Overview
  • 📊Dashboards
    • 📈Traffic Overview
    • 🔍Analysis
    • 🔴Paths Attacked
    • 👁️‍🗨️Known Bots
    • ⚡Response Overview
    • ⚡Challenge Performance
    • ⚡Top Attack Sources
    • 🔬Profiling
    • 🔬Details
    • 🔍POV Report
  • ✏️Management
    • ‼️Quarantine
    • ☑️Trusted List Management
    • 📃Audit Trail
  • 🧮Configuration
    • ⚙️Datastream Configurations
      • 🛠️Integration details
      • 👾Challenge configuration
      • 🔧Threat and Trust Lists
  • 👥User Management
    • Single Sign On (SSO)
      • SAML SSO Setup
      • Okta SSO Setup
      • Entra ID SSO Setup
      • SSO FAQs
    • IP Restriction
  • ❔Glossary of Terms
  • 📗User Guides & Videos
    • Portal Setup & Log Shipping Guide
  • 🧙‍♀️Customer Service Desk
  • 📖Integrations Documentation
  • Release notes
    • Version 1.7
    • Version 1.6
    • Version 1.5
    • Version 1.4
    • Version 1.3
    • Version 1.2
    • Version 1.1
    • Version 1
Powered by GitBook
On this page
  • What is this section for
  • Filtering
  • More Info
  • Add or remove items
  • Datastreams
  • Traffic Type
  • Values
  • Expiry (Optional)
  • Reason
  1. Management

Trusted List Management

Manage your allow lists and portal to whitelist traffic.

PreviousQuarantineNextAudit Trail

Last updated 7 months ago

The Trusted List Management works in the same way as the Quarantine section, however instead of listing threats this is your area to enter and store Allow lists, to ensure specific traffic is able to access your estate, regardless of behaviour or whether it is automated etc.

NB: items on the Trusted List will always override any models that are live on your site, or items in your Quarantine, so be careful not to add items on too broad a dimension (for eg, an IP address is safer than a Data Center).

What is this section for

  • See your overall Trusted stats

  • Add and remove records from the Trusted database

  • Search for existing records on this database

Filtering

Filter Drop-Down:

By default, both single and combination traffic are shown. Use the "Filter" drop-down to change this:

  • Show all: Display both single and combination traffic.

  • Combinations only: Display only combination traffic.

  • Exclude combinations: Display only single traffic.

  • The Filter drop-down defaults to "Show all" when navigating between datastreams, accounts, environments, and pages.

  • It is only displayed if the selected datastream(s) contain at least one combination traffic item.

More Info

You can view the More Information report on the statistics and behaviour of a specific record by either:

  • Clicking on the Record Value in blue

  • Clicking an the meatball menu (⋯) on a record will give you the option to view More Information

Add or remove items

Clicking "Add Items" will let you enter a new value into your whitelist.

Adding/removing items from the Quarantine and Trusted List is not reflected straight away in the tables. This could take a few seconds

This form will ask for some information to ensure the right traffic is being added to your trust list.

Datastreams

Lets you choose which domain(s) you would like to add this trusted record to. This will display all available domains on your account. You can choose to add items to datastreams individually or collectively.

Traffic Type

View the Glossary to understand different Traffic Types.

Values

Once the dimension has been determined, enter the value you wish to enter, for example an IP Address, a CIDR range, a list of User Agents and so on, that you wish to trust.

Expiry (Optional)

Set the date you would like this trusted entry to last until.

NB when trusting an IP address, it is recommended to give it a reasonable expiration, as IP addresses can rotate the organisations which own them.

Reason

This field is mandatory, so there is an audit trail for why this record was added to the trusted list. For example, it could be an IP Address of an uptime tool your website uses to monitor the site.

✏️
☑️
Trusted List lets you view & edit your allow list traffic
Datastream - list of domains or endpoints available on your account
Traffic Type - dropdown to choose type of value/dimension being added
Enter multiple values on separate lines if required
Select the duration type, and then the value of that duration
Enter a reason for why this record has been trusted