Sentinel ip address blocking does not work. Can I use an auth header?

Support Defender
1

I use the web hook URL service of Sentinel.

I would like to permit the request only from Sentinel,
however, the IP address of Sentinel is not static,
so IP address blocking does not work.

Can I use an auth header with Sentinel?

:computer: Environment

:memo:Details

:1234: Code to reproduce

2

Hi @ikeda1729,

Thanks for reaching out and sorry for the late response.

Unfortunately we do not have a built in mechanism for validating webhook requests and since our sentinels are in a serverless architecture the IP addresses are non static. There are 2 options you have for some type of auth, both with tradeoffs:

  1. Instead of triggering a webhook you could trigger an autotask - this would allow you to send a request to your webhook URL from inside the autotask, you could add headers/signatures along with your request. If you need any more info on this let me know.

  2. Adding a query param to the webhook URL - this is a smaller change and easier to verify, but its not as secure.

3

Thank you @dylkil
OK, I can customize the header with Auto Task,
Thank you.