KB: 00001021

How to allow access to only few IPs for backend web application?

Problem Statement

The user wants to allow only few IP address over the WAF to access the web application and block rest of all IP address from public facing internet.

Solution

1. First of all log into the management portal.

Stacks

2. Go to stack > WAF > listener > profile > setting icon > geo-filtering

Geo Filtering

3. Under "Blacklisted IP Prefixes" option user can add the IP address with their CIDR value. User need to make sure that while adding the IP addresses it should start with '~' to achieve the mentioned scenario.

Geo Filtering Settings

Incidents

In the above mentioned demo screenshot, the website is only accessible for IP 192.168.0.123 and rest all other IP addresses are blocked to access the website.