Skip to main content

Whitelisting Firewall Settings

This article covers whitelisting and firewall settings for the platform, CardConnect, and Stripe.

Written by Angel Horowitz
Updated over a week ago

๐Ÿ“ Overview

The platform is a SaaS application with 100+ external services (AWS, Google Cloud, etc.) and libraries hosted on content delivery networks that can change based on your location and other factors. Whitelisting IPs and ports at the platform level is not recommended nor supported and will most likely break the application.

This article also covers the Admin Access Whitelist feature, which allows you to restrict Admin site access to specific IP addresses, as well as whitelisting guidance for CardConnect and Stripe.


๐Ÿ”’ Dash Whitelisting

Click the arrow to learn more about Dash whitelisting

Due to the dynamic nature of the platform's external services and CDN-hosted libraries, IP and port whitelisting is not recommended nor supported and may cause the application to stop functioning correctly.

The platform does offer an Admin Access Whitelist feature, which allows you to restrict Admin site access to specific IP addresses or CIDR ranges. This can be useful for organizations that require Admin access to occur only from specific locations, VPNs, or proxy servers. This setting is found in the Security tab of Company Settings and can be enabled using the Enable Whitelisting toggle.

The page will display your current CloudFlare and User/Client IP addresses, which can be referenced when determining what to whitelist.

โš ๏ธ Important Note: Use caution when configuring this feature. It is possible to lock yourself out of the Admin site if IPs are not entered correctly. This feature should only be set up and managed by someone familiar with networking.


๐Ÿ’ณ CardConnect Whitelisting

Click the arrow to learn more about CardConnect whitelisting

CardConnect IPs and hostnames change periodically, which means IP-based whitelisting may break their services.

CardConnect does provide official documentation for whitelisting their services. Select the button below to access it.

โš ๏ธ Important Note: When referencing a site name in CardConnect's documentation, the site name used is dash.cardconnect.com.

We recommend whitelisting by CNAME rather than IP address, as IPs are subject to change.

โœ๏ธ Note: CardConnect's ACH ID is G592126793. This can be used to help whitelist transactions with your bank.


๐Ÿฆ Stripe Whitelisting

Click the arrow to learn more about Stripe whitelisting

Stripe's domain and IP whitelisting documentation is available on Stripe's website. Select the button below to access it.

Did this answer your question?