FOIAXpress Veritone Integration Configuration

1 Introduction

1.1 About This Manual

This document presents detailed information on the integration of FOIAXpress and Veritone, including the integration architecture and step-by-step instructions to enable the integration.

Before enabling the FOIAXpress and Veritone Integration for media redactions, it is important to thoroughly review this document. We recommend following the steps in the order presented in this document for successful integration configuration.

1.2 Veritone Integration Architecture for Video Redactions

The following diagram depicts the integration between the FOIAXpress application server and the Veritone Redact application.

2 Enabling Veritone Integration for FOIAXpress

The following sections explain how to configure FOIAXpress and Veritone integration. Please carefully follow the steps outlined below to ensure the successful completion of the integration setup.

2.1 Set Up Veritone Redact App Account Access for Customer

The first step to configure the integration is to set up Veritone Redact app account access. The customer will need to have an active Veritone organization account, as this account will be used by FOIAXpress for redacting the media files. The Casepoint Project Manager will coordinate with both the customer and Veritone to set up Veritone Redact app account access. All users who need to perform media redactions must have an active user account associated with this organization account.

2.2 Whitelist Veritone’s IP Addresses in the FOIAXpress Environment

The IT/System Administrator and Veritone must whitelist Veritone’s IP addresses in the FX environment.

The Veritone Redact application will need to call the FOIAXpress Media Redactions API to read the video media file data as well as to update FOIAXpress with redacted medial file information. FOIAXpress Scheduler service will read the redacted medial file from the Veritone server.

You’ll need to ensure the FOIAXpress Media Redactions API is accessible to the Veritone Redact application.

1. Allow the https (port 443) traffic from Veritone to the FOIAXpress application server.

2. Whitelist the Veritone public IP addresses in your ingress firewall:

   • 20.141.71.155

   • 52.245.243.92

   • 13.77.232.218

   • 13.77.227.4

NOTE: This IP addresses list may vary from customer to customer so please make sure to check with the Veritone team.

2.3 Whitelist FOIAXpress IP Addresses in Veritone Cloud Environment

After the customer’s Veritone Redact App has been activated, the IT/System Administrator, Project Manager, and Veritone can whitelist FOIAXpress IP addresses in the Veritone Cloud environment.

Coordinate with the Veritone team to make sure that FOIAXpress Scheduler service job can access the Veritone Redact application web service to get the redacted medial file and redactions audit log file (.CSV file). The Veritone team will whitelist IP address ranges to make sure that FOIAXpress Scheduler can access their URL/API without any issue.

Ensure the users’ (proxy server/gateway) IP addresses are whitelisted in Veritone.

Provide Veritone with the following information:

• The public IP ranges for all the end-users at the customer (who will be using Redact), for whitelisting on the Veritone ingress firewall (to allow login and accessing Redact site).

• The base URL for the FOIAXpress server hosting the media being sent to Redact, for whitelisting on the Veritone egress firewall (HTTP GET request from Veritone's servers).

2.4 Provide FOIAXpress Media Redaction API Endpoint to Veritone

The IT/System Administrator, Project Manager, and Veritone will provide FOIAXpress media redaction API endpoint to Veritone.

Provide API endpoint information to Veritone for sending the redacted file back from Veritone to FOIAXpress (HTTP POST request from user workstation). The typical format for this endpoint is as follows, but ensure it is configured correctly in the FOIAXpress application server:

https://<foiaxpress_app_server>/FOIAXpress/apiex/MediaFile/SubmitRedactedMediaInfo

2.5 FOIAXpress Application Server and IIS Configuration

The IT/System Administrator will facilitate FOIAXpress application server and IIS configuration.

2.5.1 CORS Module Configuration

To configure the CORS module:

1. Install IIS CORS Module on the server using the Web Platform Installer. Find more information about CORS module and download it from the following location: https://www.iis.net/downloads/microsoft/iis-cors-module

2. Add CORS section to the web.config file’s system.webServer section. Please review the comments and enable the <add origin="http://*" allowed="false" /> in prod server.

2.5.2 API Endpoints Element Configuration in Web.Config

Make sure to include the following "location" elements in the web.config file of the FOIAXpress application. We need to allow authorization for all users as shown below. These entries are automatically present in the web.config file starting from FOIAXpress version 11.1.0.

NOTE: The elements listed above will override the authentication of the application for the Media Redaction API endpoints. These elements indicate that the application’s authentication should be ignored for the specified API endpoints. To ensure that these elements function correctly, you must set the value of the "allowOverride" attribute to "true" in the Machine.Config file for the FOIAXpress web application.
For reference, you can find more information on this topic at:
https://learn.microsoft.com/en-us/troubleshoot/developer/webapps/aspnet/development/application-directory-  configuration

2.6 Enable Media Redaction Feature License in FOIAXpress

The FOIAXpress Application Admin User/BA should enable the media redaction feature license within the FOIAXpress application.

1. Enable Media Redaction License to the FOIAXpress License Key File and update Licenses using the new key file.

2. Ensure the Media Redaction feature is enabled in Administration > Features and Licenses > Application Features screen.

2.7 Media Redaction Settings in FOIAXpress Application

The FOIAXpress Application Admin User/BA can configure the Media Redaction settings within the FOIAXpress application.

Configure the Media Redaction Settings in FOIAXpress through the Administration > Document Management > Media Redaction Settings screen, as shown below.

• Redaction Software Application URL: This is the URL for the Veritone Redact app, which will be provided by the Veritone team and may vary for different customers.

• Redaction Software Vendor: Input "Veritone" in this field. As of now, FOIAXpress only integrates with Veritone as a third-party media redaction software.

• Supported File Formats: Input the file extensions for the media file formats that are compatible with the Veritone Redact app in this field. If you do not wish to make any changes, you may leave the default values as they are.

• FOIAXPRESS Integration URL: This is the FOIAXpress application URL.

3 Media File URL Expiration

3.1 Configuring Media File URL Expiration in FOIAXpress

The expiration time for the media files’ signed URL in FOIAXpress is controlled by the "SignedUrlExpiryTime" key under the "Document" section in the database’s tblConfig table. Veritone utilizes this URL to download files from FOIAXpress for redaction processing.

Please note that this key was not present in the database by default until FOIAXpress v11.3.0. Starting from v11.4.0, the default value for this configuration key is set to 60 minutes. Please ensure that you adjust this value per your specific requirements.

NOTE: Setting the value to overly long durations (e.g., greater than one day) can result in security vulnerabilities.

3.2 SQL Command to Update the Media File URL Expiration Time

Run the following SQL command in the FOIAXpress database to update the media file signed URL expiration time.

update tblConfig set vcValue='100' where vcSection='Document' and vcKey='SignedUrlExpiryTime’