Security rules example: Access to stream by IP address

In this example, you create access rights to a specific stream through the IP address.

You can use the IP address for access rights in the following cases:

• When you want an app to only be available from an internal network.
• When you want an app to only be available to mobile users.

Procedure

Do the following:

1. Open Virtual proxies.

2. Select the virtual proxy that you want to edit and click Edit.

3. In the Advanced section, select Extended security environment.

4. Click Apply.

5. Click OK in the Apply changes to virtual proxy popup.

6. Open Streams and create a new stream.

7. Open Security rules and click Create new.

8. In the Create rule from template list, select Stream access.

9. Enter a name for the rule.

10. Set the resource filter to filter on a specific stream:

    In the Advanced section, fill in the Resource filter field as per Security rule code.

    Example: Stream_aaec8d41-5201-43ab-809f-3063750dfafd

11. Set the conditions to specify the resource and IP address that the rule applies to:

    In the Advanced section, fill in the Conditions field as per Security rule code.

    Example: user.environment.ip = "::ffff:10.88.0.5"

12. Set the actions that the rule is to provide:

    In the Basic section, select Actions as per Security rule code.

    Select the actions Read and Publish.

13. Click Apply.

You have now created access to a specific stream based on the IP address of the connecting device.

Security rule code

The following is the security rule code for this example, with explanatory comments.