Difference between revisions of "Security - IP Ranges"
From All n One's bxp software Wixi
Philip Lacey (talk | contribs) (Created page with "In BeX it is possible to limit log ins by IP address. Full documentation on this set-up and use is available in the training document CC-2-1 Security and Custom Interface co...") |
Philip Lacey (talk | contribs) |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| − | + | = Application = | |
| − | IP restriction on logins | + | In bxp it is possible to limit log ins by IP address. |
| + | |||
| + | |||
| + | Full documentation on this set-up and use is available in the training document '''CC-2-1 Security and Custom Interface''' configuration available here [[Contact_Centre_Training]] | ||
| + | |||
| + | |||
| + | IP restrictions can be applied at a system level and / or at a user level. | ||
| + | |||
| + | |||
| + | Application of IP addresses is on a white listing basis. i.e. No IP addresses = global access. IP address specified = access only from these addresses. | ||
| + | |||
| + | |||
| + | |||
| + | = Ranges = | ||
| + | |||
| + | |||
| + | IP restriction on logins has been extended to support explicit ranges: | ||
| Line 26: | Line 42: | ||
It can now be abbreviated to: 192.168.10.5-192.168.10.9 | It can now be abbreviated to: 192.168.10.5-192.168.10.9 | ||
| + | |||
| + | |||
| + | [[Category:Module Specific:System Access Management]] | ||
| + | [[Category:Topic:Security]] | ||
Latest revision as of 18:02, 18 November 2014
1 Application
In bxp it is possible to limit log ins by IP address.
Full documentation on this set-up and use is available in the training document CC-2-1 Security and Custom Interface configuration available here Contact_Centre_Training
IP restrictions can be applied at a system level and / or at a user level.
Application of IP addresses is on a white listing basis. i.e. No IP addresses = global access. IP address specified = access only from these addresses.
2 Ranges
IP restriction on logins has been extended to support explicit ranges:
So if we had a subset range, rather than complicate matters with subnet masks, we have provided a simple - notation.
If we needed to block a range from 5 to 10, e.g.
192.168.10.5 and
192.168.10.6 and
192.168.10.7 and
192.168.10.8 and
192.168.10.9
Previously this would have been written as 192.168.10.5,192.168.10.6,192.168.10.7,192.168.10.8,192.168.10.9
It can now be abbreviated to: 192.168.10.5-192.168.10.9
