Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Web UI Administrator's Guide
  3. Section IX. Managing security
  4. Configuring network control access of NetBackup web API
  5. Configure the network access control option
NetBackup™ Web UI Administrator's Guide

Configure the network access control option

By default, none of the IP addresses can access web APIs. You must add them in network access control configuration to have the access.

You can use the network access control option to specify IP addresses or IP address ranges that must not have the access to web APIs.

Configure the network access control option

  1. On the Global security settings > Security controls tab, on the Network access control card, click Configure.
  2. On the Network access control page, select the Enable network access control check box.

    Warning:

    After you enable the Network access control option, you must add your address or IP address range and allow the access and save the configuration.

  3. Click Add in the table.
  4. In the Add IP address or IP address range dialog box, add an IP address or an IP address range that should or should not have the access of web APIs.

    Example of an IP address range: 10.0.0.0/16

    Enter the purpose of adding this IP address or range in the Comment field.

    For example, for an IP address that should have the access, you can enter the following comments: Used by finance team.

    For an IP address that should not have the access, you can enter the following comments: Blocked for abuse reports.

    Note:

    Ensure that the allowed IP address or range is not a subset of any of the denied IP addresses or ranges.

  5. Select the action type of the access control for the specified IP address or range.

    Note:

    The 'Deny' action takes precedence over the 'Allow' action.

    Select Allow network access if the specified IP address or range must have the access to web APIs.

    Select Deny network access if the specified IP address or range must not have the access to web APIs.

  6. Click Save and add another to add more IP addresses or ranges.

    Click Save after you are done with adding all the required IP addresses or ranges for the network access control configuration.

Feedback

Was this page helpful?
Previous

RBAC roles and permissions for network access control configuration

Next

Managing user sessions

Feedback

Was this page helpful?