FND-1051 · Network Connectivity · Production
Outbound proxy allow-list lacks new Directory host
HighOpen
Detected vs required
Detected configuration
allowlist: matls-dirapi.openbanking.org.uk
Required target
allowlist: matls-oblapi.directory.openbanking.org.uk
Impact
Production components cannot reach the new Directory even after application configuration is corrected.
Remediation guidance
Raise a firewall change to add the new host; retain legacy host until decommission.
Remediation workflow: OPEN · Due 2026-10-10
Evidence
1 artefacts linked to this finding or its control on the affected system
- EVD-2000Connecting to Directory API — PASSAPI test11 Sept, 09:00Approved
Context
- System
- Outbound Proxy
- Environment
- Production
- Control
- DIR-001 — Directory API endpoint migrated
- Category
- Network Connectivity
- Owner
- Unassigned
- Detected
- 09 Sept, 10:00
- Evidence ref
- egress-policy-prod.json
- Cutover blocker
- No
Linked tests
TST-001Connecting to Directory APIPASS
TST-028Directory connectivity from SandboxPASS