Britive allows the tenant administrators to configure country and IP address restriction rules at the tenant level. Administrators can define rules based on the Country or the client's IP address to allow or deny access. Rules are evaluated on a priority basis.
Note
Enable the Anti Lockout field to ensure that the IP address of the administrator who last updated the network settings can access Britive at all times, even if the defined rules include the administrator's IP address or country code for denying access.
To configure IP restriction rules:
Log in to Britive as an administrator.
Click on System admin -> Security -> Network Settings.
Click Edit to add, update, or delete the rules.
Enable the Anti Lockout field to ensure that the IP address of the administrator who last updated the network settings can access Britive at all times, even if the defined rules include the administrator's IP address or country code for denying access. The IP address of the latest administrator to update network settings is mapped as the Anti-Lockout IP.
Select Default Action to Allow or Deny, which is applied if there are no specific rules for a country and/or a client IP.
Warning:
If you disable the Anti Lockout field and the Default Action is set to Deny, there is a potential risk of locking out all users, including the administrator.
Enter the following to define the rules:
Select the Field from the drop-down list.
Select the Operator. The list of operators varies depending on the selected field.
Enter the Values.
For the country field: Enter a list of one or more country codes in a two-letter ISO format.
For the IP address field: Enter a list of one or more IPv4 addresses in CIDR notation. For example:152.57.227.128/32
Check Invert to Yes to allow/deny access to the countries or IP addresses except the one(s) listed.
Check the Action to either allow or deny access for the selected field. This field works in coordination with the Invert field.
Click the + icon to add the rule.
The Rules priority can be adjusted by dragging and dropping the rules in the list.
Use Cases
Here are some of the common use cases for using IP restrictions:
Description | Client IP/Country Code | Invert | Action | Default Action | Antilockout |
|---|---|---|---|---|---|
To block access to a particular IP | 152.57.227.128/32 | No | Deny | Allow | Disabled |
To block access from a particular country | UK | No | Deny | Allow | Disabled |
To allow access to a particular country and block access from all others | IN | Yes | Deny | Allow | Disabled |
To deny access to a particular IP and allow access to others | 152.57.227.128/32 | Yes | Allow | Deny | Disabled |
To allow access to only the administrator | IN | Yes | Deny | Allow | Enabled |