Skip to main content

IP Filtering for Admin Users

The IP Filtering feature provides a robust security layer by restricting backend access based on a user's specific Internet Protocol (IP) address. Its primary purpose is to enhance system security by ensuring that only authorized users from specified networks or devices can log into the system. This article is intended for OPS-COM administrators responsible for managing backend security and staff access controls.

Setup and Configuration

IP filtering configurations are managed directly within each administrator's user profile.

Admin Side: Administrators must navigate to the active administrators list to modify the allowed IPs for specific staff members.

Using this Feature

Administrators can use the following instructions to apply specific IP filtering rules to an admin user's profile.

Configuring IP Filters

  1. Hover over System Configuration, then Admin Management, and click Edit Admin Users.

  2. Select the specific user you wish to edit from the Manage Active Administrators page.

  3. Locate the Allowed IPs field within the user's profile configuration.

  4. Enter the appropriate IP filtering rule into the field based on the desired access level.

  5. Save the user profile to apply the security changes.

An IP address typically consists of four groups of numbers (octets) separated by dots. The first two octets generally identify the network, while the last two identify the specific machine. To find your current public IP address, use a search engine to search for "What is My IP".

Configuration Options for Allowed IP Addresses

You can precisely tailor the level of access by entering specific formats into the Allowed IPs field:

  • Allow Access from Any Network: Enter a single dot (.) to allow the user to log in from literally any network location. This is the least restrictive option and is typically used for managers who travel or work remotely.

  • Restrict Access to a Specific Network: Enter the first two octets of the network's IP address (e.g., 10.32). The user can log in from any computer connected to that specific network, but will be restricted from accessing the system from any other network.

  • Restrict Access to a Specific Computer: Enter the full IP address of the specific computer (e.g., 10.32.1.144). The user can only log in from that single, specified machine. This is the most restrictive option.

  • Allow Access from Multiple Specific Computers: Enter the full IP address of each allowed computer, placing each address on a separate line within the field.

  • Allow Access from Multiple Specific Networks: Enter the first two octets of each allowed network, placing each network segment on a separate line within the field.

Do not use wildcards (e.g., 10.*) or domain names (e.g., OPSCOM.com) in the filtering field. Only numerical IP addresses and the single dot operator are supported for configuring access.

Best Practices and Considerations

  • Balance security with flexibility: Carefully balance the need for strict security with the practical access requirements of your administrators. More restrictive settings offer higher security but may prevent staff from working remotely or from different workstations.

  • Account for dynamic IPs: Be aware that many internet service providers assign dynamic IP addresses that change over time. If administrators access the system from external locations with dynamic IPs, using a full IP filter will frequently require manual updates, making the single dot (.) setting more practical for remote users.

  • Update filters after network changes: If your organization's internal network IP scheme changes, you must immediately update the allowed IPs for all affected administrators. Failing to do so will unexpectedly lock your staff out of the backend system.

  • Consider IPv6 addresses: It is generally recommended to use IPv6 addresses if your network primarily utilizes them. IPv4 addresses are becoming less common for external-facing services.

  • Collaborate with your IT department: For complex network setups involving firewalls or VPNs, collaborate with your IT department. Ensure proper network configuration aligns with your IP filtering rules to allow necessary external access.

Back to top