Restrict access to specific IP addresses

On the Network Access page, tenant administrators can enhance their tenant’s security by controlling (or “whitelisting”) which IP addresses users are allowed to access Calabrio ONE from.

Tenant administrators can add one or more IP address ranges, and users can only access Calabrio ONE features if they log in to Calabrio ONE from an IP address within the configured ranges. If users log in to Calabrio ONE from an IP address that is not within the configured ranges, they receive an error message and cannot log in.

IP address ranges whitelisted by a tenant administrator apply to that tenant only. System administrators can whitelist additional IP ranges, and IP ranges whitelisted by a system administrator apply to all tenants in the system. If both a tenant administrator and a system administrator whitelist IP ranges, users can access Calabrio ONE from both the tenant whitelist and the system whitelist.

Calabrio ONE currently supports whitelisting only for IPv4 addresses.

NOTE   Tenant administrators who have been added by a system administrator can access their tenant from any IP address, even an IP address that is not whitelisted. This ensures that tenant administrators can access their tenant even if there is an incorrect whitelisting configuration.

Enable whitelisting

  1. Select Enable Whitelist Access Restriction.
  2. Click Add IP Range. The Add IP Range dialog box appears.
  3. In the Name field, enter a unique name for the IP address range.
  4. In the IP Range Start field, enter the first valid IPv4 address that you want to include in the range.

  5. In the IP Range End field, enter the last valid IPv4 address that you want to include in the range.

    NOTE   You must enter an IP address in the IP Range End field. If you enter the same IP address that you entered in the IP Range Start field, users can only access Calabrio ONE from that IP address.

  6. Click Add.
  7. Click Save.

IP Address Ranges table

The IP Address Ranges table enables you to monitor, edit, and delete the IP address ranges that tenant administrators have whitelisted.

NOTE   System administrators can also whitelist IP address ranges. IP address ranges whitelisted by a system administrator apply to all tenants in the system, but the ranges that they whitelist do not appear in the tenant’s IP Address Ranges table. For a complete list of whitelisted IP address ranges, contact your system administrator.

Field Description

Name

The name of the IP address range.

IP Range Start

The first IP address that is included in the range.

IP Range End

The last IP address that is included in the range.

Actions
  • Edit icon—Enables you to change the name, start, or end of an existing IP range.
  • Delete icon—Removes an existing IP range from the whitelist. Any users who currently log in to Calabrio ONE from the IP addresses included in this range will not be able to access Calabrio ONE features from those IP addresses.

Related topics