IP Address Filtering
  • 27 Aug 2021
  • 1 Minute to read
  • Dark
    Light
  This documentation version is deprecated, please click here for the latest version.

IP Address Filtering

  • Dark
    Light

Article summary

Overview

For security purposes, portal access can be restricted to specific IP addresses. This can be done at the account level and the server level. Load Balancers will interfere with IP Filtering if using a Load Balancer and wish to have IP Filtering, filtering must be set on the Load Balancer and only at the server level. 

IP Address Filtering at the Account Level

  1. Navigate to System > Security > Accounts.
  2. Select an Account. In the action menu, select Edit.
  3. In the Edit Entity dialog, scroll to SECURITY > Allowed IP Address List.
    The IP address established here is meant to be the IP of the user's machine that will be used to access the Portal. A range of IP addresses can also be used. 
    2018-02-06_142316-1024x540.png

IP Address Filtering at the Server Level

  1. Navigate to Program Files > Decisions > Decisions Server, open Settings.xml.
  2. Find the <AllowedIPAddress /> or <DeniedIPAddress /> line.
  3. Add Allowed or Denied IP addresses in the respective line. Specify multiple IP Addresses using the table below.  
  4. Save the Settings.xml file and restart the Decisions instance.

Specifying Allowed IP Addresses

The syntax for IP address specification is as follows:

It is possible to combine any of the following using semicolons to separate each entry.

IP addresses one at a time with semicolons192.168.1.10;192.168.1.255
Specify blocks of addresses, using IP address and subnet, separated by a pipe192.168.1.0|255.255.255.0
Allows any valid value to be in the last octet.
Specify multiples separated using a semicolon192.168.1.0|255.255.255.0;192.168.22.0|255.255.0.0
Specify a range of numbers192.168.1.10-192.168.1.100
This allows any address that appears between 10-100.
Note, the whole IP must be repeated.

Was this article helpful?