Defining the allowlist

As an administrator, you can restrict access to CES through approved hosts only. This adds a layer of security against host header poisoning attacks. You can manage the approved hosts in a table. 

On the Allowlist tab, you can view the hosts. Some hosts appear by default and are tied to the machine on which CES is installed. These pre-approved hosts cannot be deleted and appear grayed-out in the table.

Turn on the Enable allowlist toggle switch to allow access to CES to only those hosts on the allowlist. Turning the switch off allows a user to access CES through any host.

You can perform the following actions only when you turn on Enable allowlist:

Purpose	Action
Add a host.	Click Add. Enter the relevant value and click .
Remove a host.	Click in the relevant row.
Delete one or more manually added hosts from the allowlist.	Select the checkboxes in the relevant rows and click Delete.
Refresh the records.	Click .