Sentinel ip address blocking does not work. Can I use an auth header?

Support Defender
2

Hi @ikeda1729,

Thanks for reaching out and sorry for the late response.

Unfortunately we do not have a built in mechanism for validating webhook requests and since our sentinels are in a serverless architecture the IP addresses are non static. There are 2 options you have for some type of auth, both with tradeoffs:

  1. Instead of triggering a webhook you could trigger an autotask - this would allow you to send a request to your webhook URL from inside the autotask, you could add headers/signatures along with your request. If you need any more info on this let me know.

  2. Adding a query param to the webhook URL - this is a smaller change and easier to verify, but its not as secure.