{"id":3579,"date":"2026-08-24T07:46:53","date_gmt":"2026-08-24T07:46:53","guid":{"rendered":"https:\/\/zecurit.com\/help\/endpoint-management\/fg\/"},"modified":"2026-08-24T07:58:44","modified_gmt":"2026-08-24T07:58:44","slug":"fg","status":"publish","type":"docs","link":"https:\/\/zecurit.com\/help\/endpoint-management\/security-compliance\/fg\/","title":{"rendered":"IP Restriction"},"content":{"rendered":"\n

Zecurit’s IP Restriction<\/strong> feature enhances your organization’s security by allowing access to the platform only from approved IP addresses or IP ranges<\/strong>. This ensures that users can log in and interact with the system only from trusted network environments<\/strong>.<\/p>\n\n\n\n

\n

Note: Only the Super Admin can configure IP restriction settings. The rule applies to all users, including the Super Admin.<\/p>\n<\/blockquote>\n\n\n\n

What IP Restriction Do<\/h3>\n\n\n\n

When IP Restrictions are enabled:<\/p>\n\n\n\n

    \n
  • Access is only allowed<\/strong> from the configured IP addresses<\/strong> or IP ranges<\/strong>.<\/li>\n\n\n\n
  • Any login attempt from outside the allowlist<\/strong> will be blocked<\/strong> automatically.<\/li>\n\n\n\n
  • This restriction applies across the platform<\/strong>, including the web portal and APIs<\/strong>.<\/li>\n<\/ul>\n\n\n\n

    Supported Input Formats<\/h3>\n\n\n\n

    Zecurit allows you to restrict access by choosing one of the following input types:<\/p>\n\n\n\n

    Type<\/strong><\/th>Description<\/strong><\/th>Example<\/strong><\/th><\/tr><\/thead>
    IP Address<\/strong><\/td>Add individual IPs manually. Use the \u2795 Add button to add more IPs.<\/td>192.168.1.10<\/code><\/td><\/tr>
    IP Range<\/strong><\/td>Add IP ranges to allow access from a range of addresses. Use the \u2795 Add button to add more ranges.<\/td>192.168.1.10 - 192.168.1.100<\/code><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    How to Configure<\/h3>\n\n\n\n
      \n
    1. Login as Super Admin<\/strong>\n
        \n
      • Navigate to Settings \u2192 Security \u2192 IP Restrictions<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n
      • Add Allowed IPs<\/strong>\n
          \n
        • Enter one or more IP addresses or IP ranges in the provided field.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
        • Save and Confirm<\/strong>\n
            \n
          • Save the settings. The system will immediately apply the restrictions.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
          • Test Access<\/strong>\n
              \n
            • Try logging in from a different device or location within the allowlist to confirm access.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n

              Important Notes<\/h3>\n\n\n\n
                \n
              • Applies Globally<\/strong>: This restriction affects all users<\/strong> including Admins and Super Admins.<\/li>\n\n\n\n
              • No Bypass<\/strong>: If no valid IP is listed or the logged-in user is outside the defined range, access will be denied<\/strong>.<\/li>\n\n\n\n
              • Emergency Access<\/strong>: Maintain at least one backup IP (like VPN) in case your primary IP changes.<\/li>\n<\/ul>\n\n\n\n

                Best Practices<\/h3>\n\n\n\n
                  \n
                • Review and update your IP allowlist regularly<\/strong>, especially when:\n
                    \n
                  • Office IPs change<\/li>\n\n\n\n
                  • New locations are added<\/li>\n\n\n\n
                  • Users work remotely via VPN<\/li>\n<\/ul>\n<\/li>\n\n\n\n
                  • Combine with 2FA<\/strong> for enhanced login security.<\/li>\n\n\n\n
                  • Inform users about allowed network locations to avoid login confusion.<\/li>\n<\/ul>\n","protected":false},"featured_media":0,"parent":3575,"menu_order":1,"comment_status":"open","ping_status":"closed","template":"","meta":{"_is_vendor_doc":"0","footnotes":""},"doc_tag":[],"class_list":["post-3579","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/comments?post=3579"}],"version-history":[{"count":3,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3579\/revisions"}],"predecessor-version":[{"id":3582,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3579\/revisions\/3582"}],"up":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3575"}],"next":[{"title":"Session Settings","link":"https:\/\/zecurit.com\/help\/endpoint-management\/security-compliance\/session-settings\/","href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3583"}],"prev":[{"title":"Two-Factor Authentication","link":"https:\/\/zecurit.com\/help\/endpoint-management\/security-compliance\/df\/","href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3576"}],"wp:attachment":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/media?parent=3579"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/doc_tag?post=3579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}