Overview

The IP Restriction Add-on feature allows administrators to limit which IP addresses can access their ShareVision site. Administrators can also define which security groups are subject to this restriction which effectively allows them to relax the IP restriction for Managers or Supervisors for example. This product is installed with all groups added to the allowed list (IP Security Groups) so as not to interrupt staff access to your site. In order to block access, an administrator will need to remove groups from this list. Please discuss your specific installation strategy with your Product Expert when ordering the add-on.

Adding a Security Group to the IP Security Groups List

1. Log in as a Site Collection Administrator.
2. Go to Site Actions - > View All Site Content and find the IP Security Groups list and select it.
3. Click the new button on the toolbar.
4. Add one or more security groups to the Allowed Groups column by typing in the name of the group(s) separated by semi-colons. 
   
   
   
   
5. Check that you have typed the name(s) of the groups correctly by clicking the group check icon. If a group name is misspelled it will be underlined with a red squiggle. Retype the name until you get it correct. 
   
   
   
   
6. Click OK to save the record.
   
   
   
   

Adding an IP to the IP Security List

1. Log in as a Site Collection Administrator (or a user in one of the allowed security groups)
2. Go to Site Actions - > View All Site Content and find the IP Security list and select it.
3. Click the new button on the toolbar.
   
   
   
   
4. Type in an IP that you would like to allow access to your ShareVision site. If you don’t know the IP of the location navigate to Google search on any computer at that location and type “What’s my IP”.
5. Type in an optional description of where that IP is located. This would be something that will help you remember what that IP corresponds to like “Program A location” or “Staff Person B’s home”
   
   
   
   
6. Click OK to save the record. 
   
   

Deactivating an IP

If you would like to deactivate an IP that currently has access, you can either remove it from the IP Security list or you can edit the corresponding record in that list and deselect the active check box. The second method is handy if you might want to reactivate that IP again at a later date (e.g. after a maternity leave). 

Static IP vs. DHCP

IP addresses are generally assigned by the Internet Service Provider at the location in question. Most ISPs use DHCP which dynamically assigns these address which often expire after a few hours, days, or weeks. In these cases when the IP changes that location will no longer have access to ShareVision unless the user logging in is a member of one of the allowed security groups. When that happens an administrator will need to add the new IP to the IP Security list. To avoid this situation you may wish to inquire with your ISP about the possibility of purchasing “static IPs” for your location. A static IP is one that is always assigned to your location and will not change.