Restrict the portal's proxy capability

In some scenarios, Portal for ArcGIS acts as a proxy server. This capability is used in several situations, including the following:

• You try to access a resource on a different domain than your portal, and Cross-Origin Resource Sharing (CORS) support is not available. CORS is a specification that allows a web server and a web browser to interact and determine if a cross-origin request should be allowed.
• You add a secured map or feature service to your portal and choose to save credentials.
• You add a KML layer to a map from a URL or as an item to your portal content.
• You add a GeoRSS feed to a map from a URL.
• You try to create a hosted feature layer from a CSV file accessed through a URL.
• You generate an offline map area that includes a basemap from ArcGIS Online.

As of ArcGIS Enterprise 12.0, the portal's proxy capability is restricted by default. This may impact your ability to perform any of the workflows listed above until the appropriate hostname is added to the list of allowed proxy hosts, which by default includes the following:

• (.*).arcgis.com
• (.*).arcgisonline.com
• gisupdates.esri.com
• lws-job-results-prd0-apse2.s3.amazonaws.com—This is used when generating offline basemaps from ArcGIS Online.
• lws-job-results-prd0-euw1.s3.amazonaws.com—This is used when generating offline basemaps from ArcGIS Online.
• lws-job-results-prd0-use1.s3.amazonaws.com—This is used when generating offline basemaps from ArcGIS Online.

Note:

If you upgrade from a version prior to 12.0, the list of allowed proxy hosts you configured will be retained, and the default hosts listed above will be added to it. If you did not configure such a list, the default hosts will be added along with any hosts required for your items.

To update the list of allowed proxy hosts, follow these steps:

1. Confirm that you are signed in as a default administrator or as a member of a custom role with the administrative privilege to manage security and infrastructure enabled.
2. At the top of the site, click Organization and click the Settings tab.
3. Click Security on the left side of the page.
4. Under Allowed proxy hosts, do any of the following:
   1. To add a hostname, click Add hostname, type the hostname, and click Add hostname.

      Note:

      Use the format (.*).example.com to allow access to all machines within a specified domain.

   2. To remove a hostname, click Delete next to it and click Confirm.

Note:

All changes take effect immediately.