Security Setting - allowed sessions via approved domains

DennisHager — Tue, 06 Aug 2024 09:07:09 GMT

How does the security feature Allowed Sessions works via approved domains? Does it just reverse lookup the source IP?

BR
Dennis

Re: Security Setting - allowed sessions via approved domains

Fm12345 — Tue, 06 Aug 2024 10:53:45 GMT

Allowed sessions is to control who can login into the xdr console.

If you add your organization domain in allowed domains, then only users from that domain would be allowed.

E.g. I add abc.com as the allowed domains then any user login using user1@abc.com would be allowed whereas user1.xyz.com would not be able to access the xdr console.

Allowed Ips restricts logins by ip address ranges.

If you enable both, then it combination of domain and ip range.

So user1 has been to user1@abc.com and his connection to xdr console should be coming from the approved ip range

topic Security Setting - allowed sessions via approved domains in Cortex XDR Discussions

Security Setting - allowed sessions via approved domains

Re: Security Setting - allowed sessions via approved domains