Managing the Login Whitelist

Constraints

• If the destination server IP address, login IP address, and username of a login are all whitelisted, this login will be allowed without checking.
• After an IP address is added to a whitelist by following the instructions in Add an Item to the Login Whitelist, the alarms (if any) that have been generated for the IP address will not be automatically cleared. Handle the alarms by referring to Viewing Server Alarms.
• To unblock IP addresses, add the IP address to the whitelist of the login security detection policy. For details, see Login Security Check.

Add an Item to the Login Whitelist

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. Choose Detection & Response > Whitelists. Click Login Whitelist and click Add.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. On the displayed page, enter the server IP address, login IP address, and login username.

   Table 1 Login Whitelist parameters

   Parameter	Description	Example Value
   Server IP Address	IP address or subnet mask of the destination server. IP address: for example, 192.168.1.1 or 16A0::1 IP subnet mask: for example, 192.168.7.0/24 or 16A0:10:AB00:1E::/64	192.168.1.1
   Login IP Address
   Login Username	Current login username	hss_test
   Remarks	Custom whitelist description	Test
   Handle historical alarms	After this option is selected, login alarms that have been generated will be synchronized.	Selected

7. Click OK.

Deleting an Item from the Login Whitelist

To delete an item from the Login Whitelist, select it and click Delete above the list, or click Delete in its Operation column.