HTTP Security page field descriptions

Last Updated : Apr 20, 2023 |

Use this page to configure access permissions for HTTP requests to Avaya Breeze® platform. You can access this page on System Manager by navigating to Elements > Avaya Breeze® > Configuration > HTTP Security.

Name

Description

Cluster

If you select a cluster from the Cluster drop-down list, the system lists all the configured hosts for the Whitelist tab and the HTTP CORS tab if any. If you configure any new hosts for the selected cluster, the new hosts will be applicable only for the Avaya Breeze® platform for that cluster.

Note:

The Legacy option shown in the Cluster drop-down list can be used to administer the existing configured Whitelist and HTTP CORS for Avaya Breeze® platform Release 3.1 or earlier. For Legacy clusters on Avaya Breeze® platform Release 3.1 or earlier, the configured trusted hosts for other clusters (white-list) will also be applicable as trusted hosts.

Whitelist tab

Name

Description

Whitelist Enabled

If you select this check box, Avaya Breeze® platform for the selected cluster accepts HTTP or HTTPS requests only from the IP Addresses listed in the table. If you do not select this check box, Avaya Breeze® platform for the selected cluster accepts any HTTP or HTTPS request that passes the optional client certificate challenge.

Client Certificate Challenge Enabled

If you select this check box, Avaya Breeze® platform for the selected cluster accepts an HTTPS request only when a valid client certificate is presented. The client certificate must be signed by a trusted certificate authority.

Host Address

An IP address from which Avaya Breeze® platform for the selected cluster will accept HTTP requests when Whitelist Enabled is checked.

Subnet Bits

The subnet bits used when a range of clients need to access Avaya Breeze® platform for the selected cluster through HTTP. Subnet bits vary based on the value in the IP Address field.

HTTP CORS tab

Name

Description

Allow Cross-origin Resource Sharing for all

Select this check box to enable cross-origin resource sharing, where any JavaScript from any application server can send HTTP or HTTPS requests to Avaya Breeze® platform for the selected cluster.

You must use this setting only in the lab environment.

Host Address

The authorized IP addresses or domain names that generate HTTP requests to Avaya Breeze® platform for the selected cluster using JavaScript.

Button

Description

New

Adds an IP address or a domain name.

Delete

Marks the selected IP addresses or domain names for deletion.