Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

To Access Control by IP allows you to restrict access to applications by users from some specific IP addresses. For instance, to protect against any hacking attempts, you may only wish to allow access to PCs applications or resources from devices that are on located in the internal range of IP addressesnetwork.   Anybody trying to log on from a PC that is on an external IP external networks will be denied access.

...

bordertrue

...

or

Administration>Policies 

...

width60%
Panel
bgColor#FFFFFF

Image Removed

...

bordertrue

...

In the Category dropdown, you will see four Access Control policies.  Select Access Control - IP

Click Search

...

width60%
Panel
bgColor#FFFFFF

Image Removed  Image Removed

...

bordertrue

...

A list of Access Control policies will appear underneath, If you have not yet created one then only the default system policy will display.

The default policy allows system-wide access to all applications at any time, by all users.

Do Not Delete or Edit the default system policy.  Making any changes to this policy could result in you not being able to access the Administration Console even using the System Admin account. 

It is best practice to create a separate policy.

Click the Create button on the top right.

...

width60%
Panel
bgColor#FFFFFF

Image Removed

...

bordertrue

...

Access control by IP is implemented by creating an "Access Control - IP" policy. The example below creates an access control system that grants all users in the domain "deepnetid.com" access to the application "self-service console" if the IP address of the user's device is in the range of "192.168.111.1 - 192.168.111.255". In other words, if the user's device is not in the IP range, then the user will be denied access to the application.

Image Added

...

width60%
Panel
bgColor#FFFFFF

Image Removed

...

bordertrue
Column

After setting up the policies as above, if an attempt is made to log on to Dualshield Service Console from a PC that is outside of the scope of the IP range set, then access will be denied.

...

width60%

...

bgColor#FFFFFF

...