IP Blocking allows for the creation of a user-defined list of Allowed and/or Blocked IP addresses. If enabled, the IP list is active for all Branches.
- Admin Module: Once an IP address has been added to the block list, if access is detected from the IP address, the login screen does not contain login fields. The system administrator can remove the block if desired.
- WebReg Module: Once an IP address has been added to the block list, if access is detected from a blocked IP address, navigation is restricted to the index/search page only. The system administrator can remove the block if desired.
Navigation: Header Bar > Gear Icon > Security > IP Allowed/Blocked
Applies To: Enterprise Plus Basic
Details
-
Enable IP Blocking: Persons attempting to log into XenDirect from IP addresses added as Blocked will not be able to log in.
- Go to the Organization Profile, set the Enable IP Blocking = Yes, and save the change. If set to No, the IP Block list is ignored.
- Go to Settings »» IP Allowed/Blocked.
- Enter a Name for the IP Range.
- Enter an IP for the IP Range Start and End. If only one IP is being blocked, enter the same IP in the Start and End fields.
- Select IP Block = Block.
- Save the record.
- Enter additional IP addresses as needed.
-
Enable IP Approval: Persons attempting to log into XenDirect from IP addresses added as Allowed will be the only users able to log in.
- Go to the Organization Profile, set the Enable IP Allowed = Yes, and save the change. If set to No, the IP Allow list is ignored.
- Go to Settings »» IP Allowed/Blocked.
- Enter a Name for the IP Range.
- Enter an IP for the IP Range Start and End. If only one IP is being allowed, enter the same IP in the Start and End fields.
- Select IP Block = Allow.
- Save the record.
- Enter additional IP addresses as needed.
Automatic IP Blocking
- If during login, the XenDirect Admin Module detects an invalid username 5 times within 30 seconds, the IP address from the attempted user is automatically added to the IP Block list. This feature has been added to prevent robot style attacks to the login form. The system administrator can remove the block if desired.