Applies only to SafeConsole on-premise.

The Trusted Zone uses the IP-filter settings from the SafeConsole configuration. Unfortunately it is only possible to setup one IP-address range from the SafeConsole Configurator. By manually editing XML files you are able to add more subnets.

Always backup your safeconsole folder before making manual adjustments.

The steps to get this to work is:

  1. Stop the SafeConsole service
  2. Edit the file "context.xml.template" from the folder "[SafeConsole installation folder]\webapps\safeconsole\META-INF\"
  3. Find the row where the following text appear:
    allow="127\.0\.0\.1,0:0:0:0:0:0:0:1,{remote-ip-filter}"/>
  4. If you would like to add another subnet then the one already configured, for example 192.168.50.0, add the regular expression for the subnet to the row:
    allow="127\.0\.0\.1,0:0:0:0:0:0:0:1,{remote-ip-filter},192\.168\.50\.\p{Digit}+"/> (please see below for more examples)
  5. Save the file.
  6. Do the steps 2-5 again but with the file "context.xml.template" from the folder "[SafeConsole installation folder]\webapps\safestick_local\META-INF\"
  7. Remove the cached files safeconsole.xml and safestick_local.xml in [SafeConsole installation folder]\conf\catalina\safeconsole
  8. In order to get the settings to work you need to rerun the "Configure SafeConsole" tool and go through all the steps.

Now the Trusted Zone filter should accept both your IP-address range from the SafeConsole Configurator tool + the subnets added in the template.

(\p{Digit}+ means 'any oktet' and  '\.' means a dot)

Example: Add 192.168.*.* as a subnet:

allow="127\.0\.0\.1,0:0:0:0:0:0:0:1,{remote-ip-filter},192\.168\.\p{Digit}+\.\p{Digit}+"/>

Example, Add 192.168.1.* and 10.*.*.*:

allow="127\.0\.0\.1,0:0:0:0:0:0:0:1,{remote-ip-filter},192\.168\.1.\p{Digit}+,10\.\p{Digit}+\.\p{Digit}+.\p{Digit}+"/>