Managing Login Whitelist

Updated on 2025-02-12 GMT+08:00

View PDF

You can configure the IP addresses of destination servers, login IP addresses, login usernames, and user behaviors in the Login Whitelist.

You can add Login Whitelist in either of the following ways:

Add it to the Login Whitelist when handling false alarms of the Brute-force attack and Abnormal login types. For details, see Viewing Server Alarms.
On the Login Whitelist page, add Login Whitelist.

NOTE:

If the destination server IP address, login IP address, and username of a login are all whitelisted, this login will be allowed without checking.
To unblock IP addresses, add the IP address to the whitelist of the login security detection policy. For details, see Login Security Check.

Adding Login Whitelist

Log in to the management console.
In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
Choose Detection & Response > Whitelists. Click Login Whitelist and click Add.

NOTE:

If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.

Figure 1 Adding Login Whitelist

On the displayed page, enter the server IP address, login IP address, and login username.

**Table 1** Login Whitelist parameters
Parameter	Description	Example Value
Server IP Address	IP address or subnet mask of the destination server. IP address: for example, 192.168.1.1 or 16A0::1 IP subnet mask: for example, 192.168.7.0/24 or 16A0:10:AB00:1E::/64	192.168.1.1
Login IP Address		192.168.1.1
Login Username	Current login username	hss_test
Remarks	Custom whitelist description	Test
Handle historical alarms	After this option is selected, login alarms that have been generated will be synchronized.	Selected

Click OK.

Removing an Item from the Login Whitelist

To remove a server IP address from the Login Whitelist, select it and click Delete above the list, or click Delete in its Operation column.

NOTE:

Exercise caution when performing the deletion operation because it cannot be rolled back.

Parent Topic: Whitelist Management

Previous topic: Whitelist Management

Next topic: Managing the Alarm Whitelist