Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Panel
panelIconId1f6a7
panelIcon:construction:
panelIconText🚧
bgColor#FFEBE6

This page was created to contain general notes/documentation for the CAS API and Slate integration that is CAS-agnostic. It is under construction.

...

In December 2023 - January 2024, Liaison migrated their CAS systems to AWS. This change required the list of “allowed networks“ assigned to Initially, Liaison included in their documentation instructions to whitelist thousands of possible IP addresses and CIDR subnets in the allowed networks for the CAS/Liaison Service Account to be updated to include 7K+ possible IP addresses and CIDR subnets that might now be sending data to the SFTP server.Below is a PDF of the announcement from Liaison with details about the migration timeline, and a txt file containing a comma-separated list of the AWS IP addresses, removing the CIDR subnets not supported by Slate. This file can be used to update the service account, but detailed instructions for how to generate it are included below for future reference.in Slate. Concerns about whitelisting so many IP addresses were raised; in addition, adding the suggested IP addresses (over 7K) didn’t solve issues with file delivery to the SFTP for either WebAdMIT delivered files or the CAS API.

Liaison instructed, via two separate emails, that the following IP addresses be added to the allowed networks in order to ensure successful file delivery. They have also indicated that the “templated” CAS/Liaison Service account was updated by Slate/Technolutions, however if the account had already been added in an instance (was now custom) it needs to be updated manually.

CAS API

Code Block
3.221.151.218
35.174.21.29
100.24.188.151
35.168.84.72
44.198.99.254
54.221.197.67

WebAdMIT Destination Manager

Code Block
AWS CAS Production 
34.226.75.67
44.212.160.251
52.45.20.177

AWS CAS Prelaunch 
52.1.245.183
54.157.13.223
54.174.7.196

View file
nameallowed_networks_IP_List_AWS.txtExternal_ CAS API Subscriptions - Whitelist New IP Addresses.msg
View file
nameCAS Migration to the Cloud.pdf

To obtain the list of IP addresses:

...

Go to https://ip-ranges.amazonaws.com/ip-ranges.json and copy the JSON file.

...

Use a JSON converter to convert to an excel spreadsheet.

...

Open the excel spreadsheet and use highlight text rules to identify any IP addresses that contain a CIDR notation between /0 and /15, then delete those from the spreadsheet (when this was done in 12/2023, there were only CIDR notations of 11 - 15). Slate will not allow these CIDR subnets for security reasons (they cover too wide a range of possible IP addresses, from 131,072 to 4,294,967,296 total IP addresses).

...

Copy the column of IP addresses remaining and use a column to comma separated list converter to make the new list.

...

View file
name_External_ PTCAS_ PTCAS 23-24 Tufts University Destination Manager started failing 12_13- Case# 00329478- Ref_ Case ID_ _ ref_!00D5006gYH_!5004X01wUFrd_ref _.msg

image-20231221-142721.pngImage Modified

Allowed Networks (Deprecated January 2024)

Below are the IP addresses that are included in the “allowed networks” of existing CAS/Liaison Service accounts for future reference. It is unclear which exactly are used by the Liaison systems, the following list is provided for reference/troubleshooting.

...