---
title: "Enable IP whitelisting"
slug: "enable-ip-whitelisting"
abstract: "Manage firewall policies and enable IP whitelisting."
---
# Enable IP whitelisting

For Managed Cloud Containers, there are two Azure Web Application Firewall (WAF) policies that are associated with the CD/CM frontend host. This topic describes how to enable whitelisting for IP addresses and range.

To enable IP whitelisting:

1. Go to the Infrastructure repository and create a new branch.
2. Update `/frontdoor/main.tf` with the following:
    - In the `azurerm_frontdoor_firewall_policy`, navigate to the `custom_rule` block and replace the `match-values ["192.0.2.0/24"]` with your values `[your whitelisting IP address in CIDR format]`.

        For more information about how to manage an Azure Front Door Web Application Firewall Policy instance, go to [AzureRM documentation on Terraform](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/frontdoor_firewall_policy).

    - In the `azurerm_frontdoor_firewall_policy`, navigate to the `custom_rule` block and set `enabled` to `true`.

    For example, to apply the 192.0.2.0/24 whitelisting IP address for CD:

    ![IP_whitelist_CD.png](https://doc.sitecore.com/api/markdown-image/xp/en/developers/102/managed-cloud/images/IP_whitelist_CD.png)

    For example, to apply whitelisting IP address 1.2.3.4. for CM:

    ![IP_whitelist_CM.png](https://doc.sitecore.com/api/markdown-image/xp/en/developers/102/managed-cloud/images/IP_whitelist_CM.png)

3. Create a pull request to merge with the main branch and complete it.
4. Run the frontdoor pipeline and ensure that the pipeline executes successfully.