Cisco Cisco TelePresence Video Communication Server Expressway
Configuring the Allow and Deny Lists for Federated Domains
and Chat Node Aliases
and Chat Node Aliases
The allow and deny lists are used to control restrictions to the set of federated domains and chat node
aliases. If Privacy mode is set to Allow list or Deny list, you must add the domains and chat node aliases
with which you want to allow or deny federated connections.
aliases. If Privacy mode is set to Allow list or Deny list, you must add the domains and chat node aliases
with which you want to allow or deny federated connections.
This function manages restrictions at the domain / chat node alias level. Individual user-based privacy is
controlled by each client / end user.
controlled by each client / end user.
The allow list and deny list modes are mutually exclusive. A domain/alias cannot be allowed and denied at
the same time.
the same time.
When federation is first enabled, Privacy mode is set to Allow list by default. In effect this puts the system
in a 'lockdown' mode — you will not be allowed to connect with any federated domains or chat node aliases
until you either add them to the allow list, configure static routes, or change the Privacy mode setting.
in a 'lockdown' mode — you will not be allowed to connect with any federated domains or chat node aliases
until you either add them to the allow list, configure static routes, or change the Privacy mode setting.
1. On Cisco VCS Expressway, go to
Configuration > Unified Communications
.
2. Set Privacy mode as appropriate:
l
Off: No restrictions are applied.
l
Allow list: Federation is allowed only with the domains and chat node aliases specified in the allow list.
l
Deny list: Federation is allowed with any domain or chat node alias except for those specified in the
deny list.
deny list.
3. Click Save.
4. To manage the domains and chat node aliases in the allow or deny lists, click either Federation allow
list or Federation deny list as appropriate.
In the resulting page you can add, modify, or delete the items in the allow/deny list. Wildcards or regexes
are not allowed in the names; it must be an exact match.
In the resulting page you can add, modify, or delete the items in the allow/deny list. Wildcards or regexes
are not allowed in the names; it must be an exact match.
All domains and chat node aliases that are configured as static routes are included automatically in the allow
list.
list.
Cisco Unified Communications XMPP Federation Deployment Guide (1.4)
Page 14 of 59