Expressway-C - HTTP Allow List - How To Work With?

[A_]

Hello cisco community,

my question is how the http allow list works? We have some custom tabs to internal servers. These tabs of course work just fine from local lan. But from outside via expressway it doesn't. It just doesn't load. The local servers are already added in the http allow list.

How to handle this? How we grant access to these enterprise servers?

[Gilmar Silva]

Hello,

I am not sure if I understood, but if you are talking about the option "Configuration > Registration > Allow list", you may use it to allow or deny endpoint registration based on domains, extensions, etc.

This option is not useful to filter zones/trunks with other call controls.

Regards,

Gilmar Silva

[A_]

No, I mean the configuration in "Configuration > Unified Communications > HTTP allow list > Editable inbound rules".

The rules there doesn't work for me. The page that I want to reach is not reachable via Jabber tab.

[Gilmar Silva · Accepted solution]

Sorry, my mistake.

I know that there are some limitations to use custom tabs over MRA as you can see in the bug bellow.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc30041/?rfs=iqvred

However, the bug only says that the pages may not work properly.

If you can't reach the page, I will suggest to get a tcpdump to check if the HTTP connection is arriving into the expressway.

Regards,

Gilmar Silva

[A_]

That seems it. Plain html does work fine. but pages with lot of javascript or server side content (php - dynamically) doesn't. It's a bad solution and not useful.

Thank you for help!