{"id":2555,"date":"2025-07-02T12:43:46","date_gmt":"2025-07-02T12:43:46","guid":{"rendered":"https:\/\/zecurit.com\/help\/docs\/asset-manager\/settings\/security-compliance\/ip-restriction\/"},"modified":"2025-07-04T05:59:12","modified_gmt":"2025-07-04T05:59:12","slug":"ip-restriction","status":"publish","type":"docs","link":"https:\/\/zecurit.com\/help\/asset-management\/settings\/security-compliance\/ip-restriction\/","title":{"rendered":"IP Restriction"},"content":{"rendered":"\n<p>Zecurit&#8217;s <strong>IP Restriction<\/strong> feature enhances your organization&#8217;s security by allowing access to the platform <strong>only from approved IP addresses or IP ranges<\/strong>. This ensures that users can log in and interact with the system <strong>only from trusted network environments<\/strong>.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Note: Only the Super Admin can configure IP restriction settings. The rule applies to all users, including the Super Admin.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">What IP Restriction Do<\/h3>\n\n\n\n<p>When IP Restrictions are enabled:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Access is only allowed<\/strong> from the configured <strong>IP addresses<\/strong> or <strong>IP ranges<\/strong>.<\/li>\n\n\n\n<li>Any login attempt <strong>from outside the allowlist<\/strong> will be <strong>blocked<\/strong> automatically.<\/li>\n\n\n\n<li>This restriction applies <strong>across the platform<\/strong>, including the <strong>web portal and APIs<\/strong>.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Supported Input Formats<\/h3>\n\n\n\n<p>Zecurit allows you to restrict access by choosing one of the following input types:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th><strong>Type<\/strong><\/th><th><strong>Description<\/strong><\/th><th><strong>Example<\/strong><\/th><\/tr><\/thead><tbody><tr><td><strong>IP Address<\/strong><\/td><td>Add individual IPs manually. Use the \u2795 Add button to add more IPs.<\/td><td><code>192.168.1.10<\/code><\/td><\/tr><tr><td><strong>IP Range<\/strong><\/td><td>Add IP ranges to allow access from a range of addresses. Use the \u2795 Add button to add more ranges.<\/td><td><code>192.168.1.10 - 192.168.1.100<\/code><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">How to Configure<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Login as Super Admin<\/strong>\n<ul class=\"wp-block-list\">\n<li>Navigate to <strong>Settings \u2192 Security \u2192 IP Restrictions<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Add Allowed IPs<\/strong>\n<ul class=\"wp-block-list\">\n<li>Enter one or more IP addresses or IP ranges in the provided field.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Save and Confirm<\/strong>\n<ul class=\"wp-block-list\">\n<li>Save the settings. The system will immediately apply the restrictions.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Test Access<\/strong>\n<ul class=\"wp-block-list\">\n<li>Try logging in from a different device or location within the allowlist to confirm access.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Important Notes<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Applies Globally<\/strong>: This restriction affects <strong>all users<\/strong> including Admins and Super Admins.<\/li>\n\n\n\n<li><strong>No Bypass<\/strong>: If no valid IP is listed or the logged-in user is outside the defined range, <strong>access will be denied<\/strong>.<\/li>\n\n\n\n<li><strong>Emergency Access<\/strong>: Maintain at least one backup IP (like VPN) in case your primary IP changes.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Best Practices<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Review and <strong>update your IP allowlist regularly<\/strong>, especially when:\n<ul class=\"wp-block-list\">\n<li>Office IPs change<\/li>\n\n\n\n<li>New locations are added<\/li>\n\n\n\n<li>Users work remotely via VPN<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Combine with <strong>2FA<\/strong> for enhanced login security.<\/li>\n\n\n\n<li>Inform users about allowed network locations to avoid login confusion.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n","protected":false},"featured_media":0,"parent":2553,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-2555","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/comments?post=2555"}],"version-history":[{"count":3,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2555\/revisions"}],"predecessor-version":[{"id":2617,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2555\/revisions\/2617"}],"up":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2553"}],"wp:attachment":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/media?parent=2555"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/doc_tag?post=2555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}