Updated on 2022-12-06 GMT+08:00

Configuring the Login Whitelist

To reduce false brute-force attack alarms, add trusted login IP addresses and their destination server IP addresses to the login whitelist.

On the Login Whitelist tab, you can add login IP addresses and usernames to the login whitelist of a specific server IP address. Whitelisted logins will not trigger alarms.

To add login information to the login whitelist, you can:

  • Add false alarmed items of the Brute-force attack and Abnormal login types to the login whitelist when handling them. For details, see Checking and Handling Intrusion Events.
  • Add it to the login whitelist on the Login Whitelist tab.

Adding Login Information to the Login Whitelist

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security > Host Security Service.
  3. On the Whitelists page, click the Login Whitelist tab and click Add, as shown in Figure 1.

    Figure 1 Login whitelist

  4. In the Add to Login Whitelist dialog box, enter the server IP address, login IP address, and login username, as shown in Figure 2.

    • The IP addresses can be IPv4 or IPv6 addresses.
    • You can enter one or more values in each IP address text box. IP addresses, ranges, and masks are supported, and should be separated by commas (,). Example: 192.168.1.1, 192.168.2.1-192.168.6.1, 192.168.7.0/24.
    Figure 2 Adding login information to the login whitelist

  5. Click OK.

Other Operations

Removing login information from login whitelist

To delete a piece of login information from the whitelist, select it and click Delete, or click Delete in the row it resides.

Exercise caution when performing the deletion operation because it cannot be rolled back.