Panel | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
This page was created to contain general notes/documentation for the CAS API and Slate integration that is CAS-agnostic. It is under construction. |
...
In December 2023 - January 2024, Liaison migrated their CAS systems to AWS. This change required the list of “allowed networks“ assigned to Initially, Liaison included in their documentation instructions to whitelist thousands of possible IP addresses and CIDR subnets in the allowed networks for the CAS/Liaison Service Account to be updated to include 7K+ possible IP addresses and CIDR subnets that might now be sending data to the SFTP server.Below is a PDF of the announcement from Liaison with details about the migration timeline, and a txt file containing a comma-separated list of the AWS IP addresses, removing the CIDR subnets not supported by Slate. This file can be used to update the service account, but detailed instructions for how to generate it are included below for future reference.in Slate. Concerns about whitelisting so many IP addresses were raised; in addition, adding the suggested IP addresses (over 7K) didn’t solve issues with file delivery to the SFTP for either WebAdMIT delivered files or the CAS API.
Liaison instructed, via two separate emails, that the following IP addresses be added to the allowed networks in order to ensure successful file delivery. They have also indicated that the “templated” CAS/Liaison Service account was updated by Slate/Technolutions, however if the account had already been added in an instance (was now custom) it needs to be updated manually.
CAS API
Code Block |
---|
3.221.151.218
35.174.21.29
100.24.188.151
35.168.84.72
44.198.99.254
54.221.197.67 |
WebAdMIT Destination Manager
Code Block |
---|
AWS CAS Production
34.226.75.67
44.212.160.251
52.45.20.177
AWS CAS Prelaunch
52.1.245.183
54.157.13.223
54.174.7.196 |
View file | ||
---|---|---|
|
View file | ||
---|---|---|
|
To obtain the list of IP addresses:
...
Go to https://ip-ranges.amazonaws.com/ip-ranges.json and copy the JSON file.
...
Use a JSON converter to convert to an excel spreadsheet.
...
Open the excel spreadsheet and use highlight text rules to identify any IP addresses that contain a CIDR notation between /0 and /15, then delete those from the spreadsheet (when this was done in 12/2023, there were only CIDR notations of 11 - 15). Slate will not allow these CIDR subnets for security reasons (they cover too wide a range of possible IP addresses, from 131,072 to 4,294,967,296 total IP addresses).
...
Copy the column of IP addresses remaining and use a column to comma separated list converter to make the new list.
...
View file | ||
---|---|---|
|
Allowed Networks (Deprecated January 2024)
Below are the IP addresses that are included in the “allowed networks” of existing CAS/Liaison Service accounts for future reference. It is unclear which exactly are used by the Liaison systems, the following list is provided for reference/troubleshooting.
...