Corporate IP Ranges

The Corporate IP Range function is used to define IP ranges for both internal and external networks, and to define authentication requirements such as the locations or IP ranges from which users can log in to the Verify Privileged Identity Platform. For more information on using IP ranges in identity policies to control authentication when inside or outside a corporate IP range see Authentication Rules and Tenant IP Restrictions

To manage corporate IP ranges, use the following procedures.

  1. Click Settings from the left navigation, then select Corporate IP Range.

Alt

Adding an IP Range

  1. Click Create IP Range.

  2. In the Create IP Range dialog, fill out the fields for IP Range or Address and IP Range Name.

    Alt

  3. Click Add.

Editing an IP Range

  1. Click the IP range you wish to edit.
  2. Update the settings as necessary.
  3. Click Save.

Restricting Login by Corporate IP Range

After you define your corporate IP ranges, use an identity policy authentication rule to control login from inside or outside those ranges.

  1. Add the IP ranges your users sign in from. See Adding an IP Range.

  2. Open the identity policy for the users you want to restrict, and click the Authentication tab.

  3. In the Authentication Rules section, click Edit, then click Add rule.

  4. Enter a Name for the rule, and select the Authentication profile to apply when the condition matches.

  5. Under Authentication conditions, click Add new condition.

  6. Set Condition to IP address, and set Filter to outside corporate IP range or inside corporate IP range.

  7. Click Save, then click Add.

Test the policy with a small group before you assign it widely. For other ways to restrict access by IP address, see Login and Access Restrictions.

Deleting an IP Range

  1. Select or hover on the IP range you wish to delete, and press the Delete key.

  2. When prompted to confirm, click Delete.