Skip to main content

IP restriction

Guides

IP restriction limits access to your account to the networks you list. It is set under Manage Account > Configuration, on the IP restrictions card.

Everyone on the account can see the list. Only an Owner or an Admin can change it.

Modes​

ModeWhat it does
OffNo restriction. Everyone signs in from anywhere.
MonitorRecords what would be blocked. Blocks nothing.
EnforceBlocks everyone except the account owner.
The account owner is never blocked

Owner access from outside your networks is recorded in the audit log.

Add a network​

  1. Open Manage Account > Configuration and find IP restrictions.
  2. Under Address or range, enter one address or a CIDR range, for example 203.0.113.0/24.
  3. Under Label, name it, for example London office.
  4. Select Add network.

The card shows your current address and whether it is on the list. When it is not, Use my address fills it in for you.

Each network on the list can be disabled, enabled again or removed.

Turn it on safely​

  1. Add every network your team works from, including your own address.
  2. Set Mode to Monitor and leave it for a few working days. Access that would have been blocked is recorded.
  3. When you are sure every network is listed, set Mode to Enforce.

DataLug refuses to enforce a list that would block your own current address, and the message names the address.

A blocked user sees "Your organization restricts access to approved networks."