@rsmolgovsky-lendage 403 is an issue from authorization policy.
About the whitelist take a look at this thread.