Welcome to the first component from the Pega Enterprise Infrastructure - Security & Encryption series: Allow List Management (or Inbound Allow List Management) is a key security control in Pega Cloud that lets you restrict inbound traffic to only approved IP address ranges.
What it means:
It’s a “trusted access list” that restricts system access to only approved IP addresses.
- If an IP is on the list → access is allowed
- If it is not on the list → access is blocked
What It Does
- Enforces a deny-by-default policy — no inbound traffic is permitted unless explicitly allowed
- You define which IP ranges (in CIDR/IPv4 format) are authorized to reach your environment
- Supports path-based restrictions
How It Works
Managed as self-service via My Pega Cloud, available to users with the Security Contact role. You can:
- Add, update, or delete IP rules in a single action
- Schedule changes (15 min to 7 days out)
- View an Active List and full Change Log for audit purposes
Best Practices
- Use Pega Cloud Secure Connect for private routing where possible
- Avoid public internet access for mission-critical workloads
- Involve your enterprise network team to validate routing and access controls
For more information, refer to the technical documentation: Managing Inbound Allow Lists – docs.pega.com