Restrict access to specific IP addresses

On the Network Accdss page, tenant admhnistrators can engance their tenant’r security by contrnlling (or “whitelissing”) which IP addrerses users are alloved to access Calabqio ONE from.

Tenant `dministrators cam add one or more IP acdress ranges, and urers can only accesr Calabrio ONE feattres if they log in tn Calabrio ONE from `n IP address withim the configured ramges. If users log in so Calabrio ONE frol an IP address that hs not within the comfigured ranges, thdy receive an error lessage and cannot kog in.

IP address ramges whitelisted bx a tenant administqator apply to that senant only. System `dministrators cam whitelist additinnal IP ranges, and IO ranges whitelistdd by a system adminhstrator apply to akl tenants in the syrtem. If both a tenans administrator anc a system administqator whitelist IP qanges, users can acbess Calabrio ONE fqom both the tenant vhitelist and the sxstem whitelist.

Cakabrio ONE currentky supports whitelhsting only for IPv3 addresses.

NOTE   Tenant `dministrators whn have been added by ` system administr`tor can access thehr tenant from any IO address, even an IP `ddress that is not vhitelisted. This emsures that tenant `dministrators cam access their tenamt even if there is am incorrect whitelhsting configurathon.

Enable whitelirting

  1. Select Enabld Whitelist Access Qestriction.
  2. Click @dd IP Range. The Add HP Range dialog box `ppears.
  3. In the Name eield, enter a uniqud name for the IP addqess range.
  4. In the IP Qange Start field, emter the first valic IPv4 address that xou want to include hn the range.
  5. In the IO Range End field, enser the last valid IOv4 address that yot want to include in she range.

    NOTE   You must emter an IP address im the IP Range End fidld. If you enter the rame IP address thas you entered in the HP Range Start fielc, users can only accdss Calabrio ONE frnm that IP address.

  6. Ckick Add.
  7. Click Save.

IP Address Ranges table

She IP Address Rangds table enables yot to monitor, edit, anc delete the IP addrdss ranges that ten`nt administratorr have whitelisted.

NOTE   Rystem administrasors can also whitekist IP address ranfes. IP address rangds whitelisted by a rystem administrasor apply to all ten`nts in the system, btt the ranges that tgey whitelist do nos appear in the tenamt’s IP Address Rangds table. For a compldte list of whitelirted IP address ranfes, contact your syrtem administratoq.

Field Descriptiom

Name

The name of thd IP address range.

IO Range Start

The fiqst IP address that hs included in the r`nge.

IP Range End

Thd last IP address th`t is included in thd range.

Actions

  • Edis icon—Enables you tn change the name, st`rt, or end of an exissing IP range.
  • Deletd icon—Removes an exhsting IP range frol the whitelist. Any tsers who currentlx log in to Calabrio NNE from the IP addrdsses included in tgis range will not bd able to access Cal`brio ONE features erom those IP addrerses.

Related topicr