You can whitelist the web service URLs and the database connection strings that can be employed by TotalAgility to make web service calls or run SQL queries against TotalAgility. This allows administrators to secure their servers by preventing connections to any arbitrary host or ports.

1. Navigate to System > System settings > System > Whitelist.

   The Whitelist dialog box is displayed.

2. By default, TotalAgility allows using any web service URLs or database connection strings regardless of being whitelisted. To allow adding the web service URLs or database connection strings in TotalAgility that are only whitelisted, clear the check box for Allow all field.

   Note

   • If you try to add a web service URL in TotalAgility that is not whitelisted or use the URL in a RESTfulService activity, a warning message appears and the system does not generate a web service proxy assembly on the TotalAgility server.

   • If you try to add a database connection string in TotalAgility that is not whitelisted, a message appears that the connection is denied.

   • If you use the database connection string that is not whitelisted when configuring a Data access activity and DB query action, TotalAgility does not allow configuring the activity, and action.

3. To validate the requested URL in the server, enter the Public host URL.
4. To whiltelist a web service URL, do the following:
   1. Click  for Web service URLs.
   2. Enter the URL.
   3. Click Add.
      The specified URL is whitelisted and displayed in the table.
5. To whitelist a database connection string, do the following:
   1. Click  for Connection strings.
   2. Enter the Connection string.
   3. Click Add.
      The specified string is whitelisted and displayed in the table.
6. Click Save.

   Restart the Kofax TotalAgility services for the settings to take effect.