Allowlist IP addresses

Transcript

In this video, I will show you how to add IP addresses to the allow list of your Adobe Campaign Classic instance, using the Control Panel. By default, an Adobe Campaign Classic instance is not accessible from IP addresses that are not explicitly on the allow list for it. For example, if you were to work from another office location and the office IP address is not on the allow list for your Campaign instance, you will not be able to access it until the IP address or the address range has been added to the allow list. Another example is if you would like to connect an API to your message center or Marketing instance, the IP address for this needs to be added to the allow list for the instance.

Let me show you how to do this. So from the Control Panel homepage, navigate to instance settings.

On the allow listing tab, that’s the first tab that pops up, you will see the list of IP ranges that are on the allow list for the Campaign Classic instance you have selected from the dropdown on the top, including the access type and the instance type.

Let’s take a closer look. So here you can see this IP range has access to the Campaign console. The access type is only enabled for marketing instances. So it’s the Campaign console and a Marketing instance. Message Center or MID instances are not enabled for this access type.

This IP range here only has access to the Marketing instance via API. This access type, however, can also be enabled for Message Center instances. The third option is the AEM connection. This is a specific AEM IP address range which is allowed to connect to Marketing instances.

Let’s add a new IP range. To do this, click on the new IP range button on the top right, fill out all the fields. We’ll start with the instances. So select the instances you would like to add the IP range to. By default, the instance that you have selected on the top dropdown will be listed, but you can add any other Campaign Classic instance your company has to this field. So you can add the IP range to the allow list of one or multiple instances at the same time.

Now select the access type.

We recommend that you only enable those access types that you actually require to access from this IP address range, and not ones that you really do not intend to use.

Then at the IP range itself, this needs to be added in the CIDR formats. This format consists of the IP address, followed by a slash and a decimal number.

If you need information on how to convert your IP address into CIDR format and would like to learn more about the CIDR format, please see the documentation.

Next, add the label and the name.

The name has to be unique for the access type and the IP address. The label will be displayed in the allow list and does not need to be unique.

Once you have filled everything in, click save.

You will see that the addition of the new IP range is pending, and then you can see that the job has gone through.

Now, the IP address range is on the allow list, and you can create and link campaign operators to them so that the users can access the instance.

We do recommend that you remove all IP addresses that are not required to connect to an instance anymore.

To do this, simply click on the checkbox in front of the IP ranges you would like to remove. This could be one or multiple. The delete IP range button will appear, and it also indicates how many IP ranges you have selected. So you can double check that. And you can remove them by clicking on the button.

We really do not recommend adding IP addresses of public places to the allow list, for example, airports or hotels, et cetera. -