Updated on 2023-06-13 GMT+08:00

Importing a Whitelist

This section describes how to import an IP address whitelist. MTD will ignore threats related to the IP addresses or domain names contained in the whitelist.

Prerequisites

You have uploaded a plaintext whitelist to an OBS bucket. For details, see Uploading a File.
  • Currently, only one whitelist file with a can be maximum of 10,000 IP address or domain names can be uploaded.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click in the navigation pane on the left and choose Security & Compliance > Managed Threat Detection.

    Figure 1 Home page of MTD

  4. Choose Settings > Threat Intelligence in the left navigation pane.
  5. On the Whitelist tab, click Add Whitelist. The Add Whitelist dialog box is displayed.

    Figure 2 Add a whitelist
    Table 1 Whitelist file parameters

    Parameter

    Description

    Example Value

    File Name

    Name of the intelligence file to add

    SecurityList

    Intelligence Type

    Content type of the file to be uploaded from the OBS bucket to MTD

    • IP: MTD will detect threats based on the IP addresses in the whitelist file.
    • Domain name: MTD will detect threats based on the domain names in the whitelist file.

    MTD ignores log information that is associated with the IP addresses or domain names in the whitelist file.

    IP

    Bucket Name

    Name of the OBS bucket where the file is located

    NOTE:

    If no OBS bucket is available, click View/Create OBS Bucket. For details, see Creating a Bucket.

    obs-mtd-bejing4

    Object Name

    Name of the object in the bucket that stores the intelligence

    NOTICE:

    The object name must contain the file name extension.

    mtd-securitylist-ip.txt

    Storage Path

    Path of the OBS bucket storing the intelligence file

    obs://obsmtd-beijing4/mtd-securitylistip.txt

  6. Confirm the information and click OK. If the added file is displayed in the whitelist pane, the operation is successful.