Best Practice for creating IP Whitelist ACL for Web API Assets

[Maxh]

Hello,

we're currently deploying CloudGuard WAF aaS for our public services and wanted to add semi-public services also, which we currently run through our old WAF with IP (and Subnet) Whitelisting.

As per the title: What's the recommended way to achieve this?

Thanks!

[yuvalmamka · Accepted solution]

Hi Maxh,

You can use Custom Rules and Exceptions for achieving this.

Look for further details here: Setup Custom Rules and Exceptions | CloudGuard WAF

[Maxh]

Okay, I was on the right path then. I'd just create a custom rule which drops traffic if the IP is not in the list.