Target Audience: Users
Release version: 3.6.8
Updated version: 3.7.7
AdminPortal Whitelisting in Payway is a security focused feature that when enabled requires all IP-addresses that should have access to AdminPortal (Payway Administration) to be added to the whitelist by you.
Why should you enable AdminPortal Whitelisting?¶
To ensure unauthorized access to AdminPortal (Payway Administration) one step is to block access to this site.
- Access via a Brute force attack on a non-whitelisted network.
- Access via leaked user credentials on a non-whitelisted network.
This does NOT prevent¶
- Access via a Brute force attack on a hijacked whitelisted network.
- Access via leaked user credentials on a hijacked whitelisted network.
How this feature works¶
The feature needs to be enabled in the AdminPortal (Payway Administration), only by adding IP-addresses to the whitelist does not enable the feature.
This feature prevents unauthorized access to AdminPortal (Payway Administration) by only giving access to IP-addresses that are whitelisted, unauthorized IP-addresses will be redirected to Payway ClientPortal.