%201.png){kind=logo}
Unmasking Zones
Overview
To view data that is masked by a masking policy in an unmasked state, users typically need to either request and receive approval for an Unmasking Request via Workflow or be registered as an "allowed user" within the masking policy itself. However, in some environments, there's a requirement that even users authorized to view unmasked data should only be able to do so from specific IP addresses or IP ranges. The Unmasking Zones feature is provided to support such security requirements.
Configuring Unmasking Zones
To configure Unmasking Zones, Allowed Zones must be set up first.
Navigate to the Databases > General > Configurations menu.
Locate the Unmasking Zones setting and switch its radio button to
On. Click the+ Add Configurationbutton.
From the list that appears, select the name of the pre-configured Allowed Zone you wish to add to the Unmasking Zones.
Add Allowed Zone
Click the
Save Changesbutton to save your settings.
Editing IP Addresses/Ranges Registered in Unmasking Zones
Unmasking Zones utilize the IP addresses and ranges defined within the Allowed Zones configurations. Therefore, to add, remove, or change the IP addresses or ranges associated with an active Unmasking Zone.
Disabling Unmasking Zones Settings
In the Databases > General > Configurations > Unmasking Zones settings, select the specific Allowed Zone you wish to remove from the list. Click the
Deletebutton.
Click the
Save Changesbutton to save the changes.
An Allowed Zone that is currently assigned to Unmasking Zones cannot be deleted directly from the Allowed Zones management area. You must first remove it from the Unmasking Zones configuration.
You can switch the main Unmasking Zones feature from On to Off even if Allowed Zones are registered. If you later switch it back to On, the previously configured Allowed Zones list for Unmasking Zones will be retained and reapplied.
However, if you make changes to the list of Allowed Zones within the Unmasking Zones setting and then immediately switch the entire Unmasking Zones feature to Off without first clicking Save Changes, those recent list modifications will not be saved or applied.