IP Restriction

Enabling IP restrictions ensures that your important data can’t be accessed at an unsecured public place or through an unregistered IP address.

There are 2 types of IP Addresses:

1. Static IP: The IP address of a user remains the same every time he/she connects to the network.
2. Dynamic IP: IP address may vary for a user every time he/she connects to the network.

For corporate purposes, static IP addresses are suggested. This is because Dynamic IP keeps changing every time users login, and hence the admin needs to update the IP addresses range/pool on a regular basis which is a repetitive tedious task.

When a user tries to log in/access their account, the IP address of the login request is verified against the whitelisted IPs configured in the IP Restriction policy. If the IP address is not whitelisted, the login request is denied.

Organization owners or security admins can either Allow, Challenge or Deny user requests depending on the IP address range of the user session’s IP address.

Here’s a list of additional security solutions that businesses can implement other than IP restriction,

1. Multi-factor Authentication An advanced level of authentication with two or more levels of security factors such as OTP over SMS, TOTP tokens, OTP over Email, hardware tokens, etc.
2. Risk-based MFA Restrict the number of devices the users can access the services on, Geo-location, IP restriction, time of login, etc.
3. Adaptive Authentication It provides an additional layer of MFA security based on risk and access provided by the security admin to control user access.

1. Allow access only via the office network IP
2. Allow access only from specific IP addresses
3. Restrict access based on applications or resources
4. Disable access from specific networks or IP addresses
5. Allow only VPN IP access for applications and resources