IP allow listing

About IP allow listing

By default, your Adobe Campaign instance is not accessible from various IP addresses.

If your IP address has not been added to the allow list, you will not be able to login to the instance from this address. The same way, you may not be able to connect an API to your Message Center or Marketing instance if the IP address has not been added to the allow list with the instance explicitly.

Control Panel allows you to set up new connections to your instances by adding IP addresses ranges to the allow list. To do this, follow the steps described below.

Once IP addresses are on the allow list, you can create and link Campaign operators to them so that the users can access the instance.

Discover this feature in video

Best practices

Make sure you follow the recommendations and limitations below when adding IP addresses to the allow list in the Control Panel.

• Do not enable IP access to all Access Types if you do not intend the IP address to connect to your RT servers, or AEM security zone.
• If you temporarily enabled access to your instance for an IP address, make sure to remove the IP addresses from the allow list once you don’t it need anymore to connect to your instance.
• We do not recommend adding IP addresses of public places to the allow list (airports, hotels, etc.). Please use your company VPN address to keep your instance secure at all times.

Adding IP addresses to the allow list for instance access

To add IP addresses to the allow list, follow these steps:

1. Open the Instances Settings card to access the IP allow listing tab, then click Add new IP Range.

   

2. Fill in the information for the IP Range that you want to add to the allow list as described below.

   

   • Instance(s): The instances to which the IP addresses will be able to connect. Several instances can be manipulated at the same time. For example, IP allow listing can be performed on both Production and Stage instances through the same step.
   • IP Range: The IP range that you want to add to the allow list, in the CIDR format. Note that an IP range cannot overlap an existing range on the allow list. In that case, first delete the range that contains the overlapping IP.
   NOTE

   CIDR (Classless Inter-Domain Routing) is the supported format when adding IP ranges with the Control Panel interface. The syntax consists of an IP address, followed by a ‘/’ character, and a decimal number. The format and its syntax are fully detailed in this article.

   You can search on the internet for free online tools that will help you convert the IP range that you have in hand to CIDR format.

   • Label: The label that will display in the allow list.
   • Name: The name has to be unique for the Access Type, Instance (in case of External API connection) as well as the IP address.

3. Specify the type of access that you want to grant to the IP addresses:

   • Campaign Console Access: The IP addresses will be allowed to connect to the Campaign Client Console. Note that Console access is enabled for Marketing instances only. Access to MID and RT instance is not permitted and therefore not enabled.
   • AEM connection: The specified AEM IP addresses will be allowed to connect to the Marketing instance.
   • External API connection: External APIs with the specified IP addresses will be allowed to connect to the Marketing and/or Message Center (RT) instance. Note that connection to the console of RT instances is not enabled.
   NOTE

   If you are using an instance with an hybrid hosting model, you will only be able to add IP addresses in “External API Connection” for MID and RT Instances.

   

4. Click the Save button. The IP Range is added to the allow list.

By default, your Adobe Campaign instance is not accessible from various IP addresses.

To delete one or more IP ranges from the allow list, select them, then click the Delete IP range button.

Related topic:

• Linking a security zone to an operator