IP Whitelisting
IP Whitelisting is a security feature that allows you to control IP addresses that can access Ivanti Service Manager APIs. It is done using the API Trusted Host business object by which you can specify a range of trusted host IP addresses or specific host IP addresses that are allowed access to APIs.
This feature is applicable for both REST and SOAP APIs.
Enabling and Disabling IP Whitelisting
You can enable or disable the IP Whitelisting feature from the Configuration console. By default this feature is disabled.
1.Log in to the Configuration console > Build > Global Constants.
2.To enable - set the Value field in the API_White_Listing_Enable option as True.
3.To disable - set the Value field in the API_White_Listing_Enable option as False.
If you have enabled the IP Whitelisting feature but haven't configured any API Trusted Host, then all the IP addresses will be allowed access to Ivanti Service Manager APIs.
Creating a new API Trusted Host
1.Log in to Service Manager with Administrator user role.
2.Open the API Trusted Host business object.
3.Click New API Trusted Host and enter the following details:
| Field | Description |
|---|---|
| Name | Name of the API Trusted Host. |
|
Description |
Description for the API Trusted Host. |
|
Start IP |
First IP address in the range of the trusted IP addresses. |
|
End IP |
Last IP address in the range of the trusted IP addresses. In case of specifying a single IP address, the Start IP address and the End IP address will be the same. |
4.Click Save.
A new API Trusted Host record is created which allows the configured IP addresses access to Ivanti Service Manager APIs.
Viewing and Modifying an API Trusted Host
1.Log in to Service Manager with Administrator user role.
2.Open the API Trusted Host business object. The application displays a list of API Trusted Hosts.
3.Double-click the API Trusted Host record you wish to modify.
4.Modify the details as required and click Save.
The API Trusted Host record is saved with the latest changes.
Deleting an API Trusted Host
1.Log in to Service Manager with Administrator user role.
2.Open the API Trusted Host business object. The application displays a list of API Trusted Hosts.
3.Select the API Trusted Host record you wish to delete and click Delete.
4.Click Yes in the prompt message.
The selected API Trusted Host record is deleted and the IP addresses associated with it no longer have access to Ivanti Service Manager APIs.