Introduction
This article outlines the recommended block-list and allow-list rules to be implemented on school networks to allow access to Box files from National FFA while preventing access to personal Box accounts.
Purpose
The purpose of these rules is to remove barriers to accessing secure FFA content hosted through Box while allowing members and guests to access FFA Box resources while prohibiting access to personal Box resources unaffiliated with FFA.
This information is provided without any guarantee. Please have your IT department review and test these recommendations.
Allow
The following domains should be added to the network’s allow-list to ensure access to National FFA documents:
- api.box.com
- ffa.account.box.com
- ffa.app.box.com
- ffa.box.com
- ffa.ent.box.com
- 2.realtime.services.box.net
- sso.services.box.net
- cdn01.boxcdn.net
- cdn02.boxcdn.net
- cdn03.boxcdn.net
- cdn04.boxcdn.net
- cdn05.boxcdn.net
- cdn06.boxcdn.net
- cdn07.boxcdn.net
- cdn08.boxcdn.net
- cdn09.boxcdn.net
- cdn10.boxcdn.net
- cdn11.boxcdn.net
- cdn12.boxcdn.net
- cdn13.boxcdn.net
- cdn14.boxcdn.net
- cdn15.boxcdn.net
- cdn16.boxcdn.net
- cdn17.boxcdn.net
- cdn18.boxcdn.net
- cdn19.boxcdn.net
- cdn20.boxcdn.net
- dl.boxcloud.com
- dl2.boxcloud.com
- dl3.boxcloud.com
- dl4.boxcloud.com
- dl5.boxcloud.com
- dl6.boxcloud.com
- dl7.boxcloud.com
- dl8.boxcloud.com
- dl9.boxcloud.com
- dl10.boxcloud.com
- dl11.boxcloud.com
- dl12.boxcloud.com
- dl13.boxcloud.com
- dl14.boxcloud.com
- dl15.boxcloud.com
- dl16.boxcloud.com
- dl17.boxcloud.com
- dl18.boxcloud.com
- dl19.boxcloud.com
- dl20.boxcloud.com
Block
The following domains should be added to the network’s block-list to prevent access to personal Box accounts:
- app.box.com
- m.box.com
The above is related specifically for access to FFA resources on Box. For more information about access, please consult this article.