EDR: How to Manually Check or Edit the NGINX IP Filter List

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To access, or "allow" and "deny", IP addresses for the EDR Server

Environment

• EDR Server 6.x: On Premise

Resolution

1. Open /var/cb/nginx/props/nginx.runtime.ipfilters.prop in your choice of text editor
2. Add or restrict IP addresses as necessary

• Example File Format : 

allow 192.168.0.0/16;
allow 172.10.0.0/12;
allow 10.0.0.0/8;


allow 127.0.0.0/8;
deny all;