Stratus Panel - Access on Webscale Product Documentation

Stratus Panel - Access > Controlling Access

Mon, 01 Jan 0001 00:00:00 +0000

Since your Webscale STRATUS pricing is based on user sessions, it is prudent to restrict users to only those that should be visiting a Magento environment. For example, if a environment is not shipping or selling to customers in Russia, then visitors from Russia can be blocked.

STRATUS provides the following methods for controlling access:

[Protect Website](/docs/reference/stratus/control-panels/access-panel/protect-website/ “Configure website protection”/) — Set a sitewide username and password in order to access any part of the environment.
[Protect URL](/docs/reference/stratus/control-panels/access-panel/protect-url/ “Configure website URL protection”/) — Restrict access to specific URL paths in a Magento environment by setting a username and password.
[Restrict By IP Address](/docs/reference/stratus/control-panels/access-panel/restrict-ip/ “Configure IP restrictions”/) — Restrict access to an environment by allowing or denying specific IP addresses.
[Block Countries](/docs/reference/stratus/control-panels/access-panel/block-countries/ “Configure country blocking”/) — Block users who are trying to access a Magento environment based on their country location of access.
[Block Bots](/docs/reference/stratus/control-panels/access-panel/block-bots/ “Configure bots blocking”/) — Block unnecessary “bots” from indexing a Magento environment.

Stratus Panel - Access > Protect Website

Mon, 01 Jan 0001 00:00:00 +0000

Create Website Protection

To restrict access to the entire website:

Go to Access > Protect Website in the STRATUS Admin panel left sidebar menu.
- Select Enabled.
- Login — Enter a username.
- Password — Enter a password. To create a random password, click Generate Password. To view the password, click the Eye Icon at the right of the password field.

Click UPDATE to save your new login.

You can only have one HTTP authorization password for a STRATUS environment.

Stratus Panel - Access > Protect URL

Mon, 01 Jan 0001 00:00:00 +0000

Create a Protection Rule

To create a path specific authorization rule:

Go to Access > Protect URL in the STRATUS left sidebar menu.
Choose + Add New Rule
- Label — Enter a name for the rule.
- Restricted URL — Enter the path to be restricted. If the store uses “.html” suffixes, include the suffix with the path. Entering a path ending in a slash ("/") will restrict all files within the directory.
- Login — Enter a login username.
- Password — Enter a password. To create a random password, click Generate Password. Once saved, passwords cannot be later seen; to view a password before saving, click the Eye Icon at the right end of the password field.
Click Create to save your new restriction.

Edit a Protection Rule

To edit an existing rule:

Stratus Panel - Access > Restrict by IP

Mon, 01 Jan 0001 00:00:00 +0000

Create a Restriction Rule

To create an IP restriction rule:

Go to Access > Restrict by IP Address in the STRATUS sidebar menu.

Select Redirect Visitor To URL Below If IP Doesn’t Match Rules if you wish to send a restricted user to a special webpage. This page can be on any website; it does not have to be on your STRATUS server. Enter the entire URL, including domain.
Select Deny IP Access To The Website, Except Allowed Below if you wish to apply a website-wide restriction to all visitors except any that are allowed by subsequent rules.
Click ADD IP RULE. * Label — Enter a name describing the rule for your use. * IP Address Or Subnet — Enter the IP number or subnet to be used for the rule. * Rule — Select “Allow” or “Deny” to the action preferred for visitors from the IP added to the rule.
Repeat Step 3 for each rule to be created.
Click UPDATE to apply the rules to the STRATUS environment.

Restriction Scenarios

To illustrate how to use this feature, the following are example scenarios.

Stratus Panel - Access > Block Countries

Mon, 01 Jan 0001 00:00:00 +0000

The location of the accessing IP is determined by lookups in databases that match IP numbers with known locations of IP address blocks. GeoIP is not perfect but it will block most of the traffic from a given country.

Country blocks, unlike the other access restrictions in the Access section, apply their block directly to your CloudFront distribution. All traffic is stopped before it reaches your STRATUS environment.

Create Country Blocks

To create blocks:

Stratus Panel - Access > Block Bots

Mon, 01 Jan 0001 00:00:00 +0000

Edit Bots List

Remember, user-agents added to this list will be blocked from accessing the website.

Go to Access > Block Bots in the Webscale STRATUS sidebar menu.

Add any user-agent you wish to the list. Each agent should be on a separate line. Each user-agent listed will block any user-agent that contains the name in the list.
Click UPDATE to save changes.

A user-agent value of “baidu” will block any user-agent containing “baidu” such as “baidu-agent,” “baiduuserfromsomewhere,” or “somebaiduagent.”