Security

Whitelisting Centra IPs

info

To follow these steps, you need an Integration API token with the Read permissions for CentraIP details. This can be achieved by creating a new API token or updating an existing one with the correct permission.

1. With this token and URL you'll be able to run the following GraphQL query:

   curl
       -H 'Content-Type: application/json'
       -H "Authorization: Bearer {{ token }}"
       -X POST
       -d '{"query": "query { centraIPs }"}'
       https://{{ brand }}.centra.com/graphql

2. The output would be similar to:

   {
     "data": {
       "centraIPs": ["123.123.123.123", "123.123.123.123"]
     },
     "extensions": {
       "complexity": 10,
       "permissionsUsed": ["CentraIP"]
     }
   }

3. The list of IPs should be allowed in your firewall for both incoming and outgoing traffic. Query this list every 10-15 minutes for accuracy. During platform updates, additional IPs may be temporarily added. Each brand and environment has its own IPs, so configure separate API URL/token integrations for each.