M312: Filtering on Source IP Address

 

In the initial settings, the workflow platform (Server) does not restrict the connection source (Client) of functions that require user authentication (Web UI or Questetra REST API). It can be accessed and used from anywhere in the world. You can also whitelist connecting source IPs to restrict access. On the other hand, access to modeling elements such as [Message Start Event (HTTP) ] is restricted from being available from external networks by default. It will be available by removing the restriction or whitelisting the source IP to allow access.

1. Overview of Source IP Filtering on the Workflow Platform

a. IP Filtering (Global Configuration)

Restricts the source IP address for access to the entire workflow platform, including user logins and REST API requests

b.  API IP Filtering (Message Start Event/Receive Task  Configuration)

Restricts the source IP address for specific applications or nodes, limiting access to HTTP and Webhook requests that do not require user authentication

For detailed settings, please refer to System Settings – IP Address Filtering

System Settings – IP Address Filtering

---

Z. More Info: Restrict access destination hosts

a. Filtering connection destinations of HTTP communication

Enable [HTTP Destination Filtering] and register hosts to permit

HTTP communication from workflow apps is restricted to the allowed hosts only

System Settings – HTTP Destination Filtering

X. Tutorial

• Starting a Case from Outside of Questetra BPM Suite