Findings
FND-1051 · Network Connectivity · Production

Outbound proxy allow-list lacks new Directory host

HighOpen
View evidence

Detected vs required

Detected configuration

allowlist: matls-dirapi.openbanking.org.uk

Required target

allowlist: matls-oblapi.directory.openbanking.org.uk

Impact

Production components cannot reach the new Directory even after application configuration is corrected.

Remediation guidance

REM-110

Raise a firewall change to add the new host; retain legacy host until decommission.

Remediation workflow: OPEN · Due 2026-10-10

Evidence

1 artefacts linked to this finding or its control on the affected system

  • EVD-2000Connecting to Directory API — PASSAPI test11 Sept, 09:00Approved

Context

Environment
Production
Control
DIR-001Directory API endpoint migrated
Category
Network Connectivity
Owner
Unassigned
Detected
09 Sept, 10:00
Evidence ref
egress-policy-prod.json
Cutover blocker
No

Linked tests

TST-001Connecting to Directory APIPASS
TST-028Directory connectivity from SandboxPASS