IP Restriction Add-On Configuration

Applies To Version(s): 4 - Add-on: Contact Customer Success, Sales or a ShareVision Product Expert to order.

Overview

The IP Restriction Add-on allows ShareVision Administrators to limit which IP addresses (locations) can access their ShareVision site. They can also define which security groups are exempt from the IP Restriction which will allow them to access your ShareVision site from any IP Address.

An Internet Protocol (IP) address is an identifying number given to a device on a computer network. The IP Restriction Add-On makes use of a static IP address to only allow those locations (or modems) to connect with your ShareVision site.

Static IP vs. DHCP

IP addresses are generally assigned by the Internet Service Provider at the location in question. Most ISPs use DHCP which dynamically assigns these addresses. DHCP IP addresses often expire after a few hours, days, or weeks. In these cases when the IP changes that location will no longer have access to ShareVision (unless the user logging in is a member of one of the allowed security groups - see below). When the DHCP changes a site administrator will need to add the new IP to the IP Security list.

To avoid this situation you may wish to inquire with your ISP about the possibility of purchasing “static IPs” for your location. A static IP is one that is always assigned to your location and will not change.

Requirements/Dependencies

Before you can configure the IP Restriction Add-on, the following is required:

A subscription to the IP Restriction Add-on
An account with ShareVision Administrator permissions
A plan for which security groups will be exempt from logging in from specific IP addresses
A list of IP addresses that will be permitted to log in

Using static IP address(es) is strongly recommended. We do not recommend using DHCP IP addresses. Please see the information about Static IP vs. DHCP above for more details.

How to Find Your IP Address

The IP address that's shown in network setting may not be the correct address to use in the IP Restriction add on. If the incorrect IP address is used, the IP Restriction add on will not work. To find your IP address google "find my IP address" and the first link that pops up, https://whatismyipaddress.com, will be able to tell you your IP address.

The IP listed beside IPv4 can be used to successfully block or allow access in the IP Restriction add on.

IP Restriction Initial Configuration - Security Groups Allowed

Login to ShareVision with a user account that has Site Administrator permissions.
Select the gear in the upper right-hand corner and then select Site Administration:
When prompted, enter your ShareVision Administrator username and password and select Sign In.
In Site Administration, in the Features and Utilities section, select IP Restriction Configuration.
The IP Restriction Configuration will open in a new tab.
Use this page to identify which Security Groups and IP Addresses will be exempt from the IP Restriction on your ShareVision site.
GRP Site Administrator is not available as any user listed as a Site Administrator will be able to log in from any IP address.
Identify which Security Groups will be exempt from the IP Restrictions on your ShareVision site. In the Security Groups Allowed section, select Add New Item.
In the Allowed Groups field, select each group that will be exempt from the IP Restriction on your ShareVision site. If there are multiple groups, each group must be entered in this field.
When you have added all of the groups, select Save.

After you have added the group(s) to the Allowed Groups field and saved, the Add New Item link in the IP Security Groups section will no longer be available. If you need to add or remove group(s), select the Edit button to edit the existing item and add or remove groups from the field.

IP Restriction Initial Configuration - IP Addresses Allowed

On the same window where you set up the IP Security Groups (see above), you will need to add the IP Addresses Allowed to connect to your ShareVision site. In the IP Addresses Allowed section, select Add New Item.
In the IP Address field, enter one of the IP Addresses that is allowed to connect to your ShareVision site.
Next, enter a Description (optional).
By default, the Active checkbox is checked. If you would to deactivate that IP Address so that it can be activated later, uncheck the box.
Select Save.
Repeat steps 1 to 5 above for each IP Address that is allowed to connect to your ShareVision site.

IP Restriction Initial Configuration - Enable/Disable IP Restriction Configuration

You will now need to enable the IP Restrictions on your ShareVision site. In Site Administration, in the Features and Utilities section, select Feature Settings.
Select the arrow next to IP Restriction Configuration to expand the section.
Check the box next to Enable IP Restriction Configuration.
Select Save.

Unchecking the Enable IP Restriction Configuration check box in Feature Settings: IP Restriction Configuration will disable IP Restrictions on your ShareVision site. This can be helpful if you need to troubleshoot the settings or if you would like assistance from our Support Team or a Product Expert.

Adding or Removing Allowed Groups

To add or remove groups in the Allowed Groups, login to ShareVision with a user account that has Site Administrator permissions.
Select the gear in the upper right-hand corner and then select Site Administration:
When prompted, enter your ShareVision Administrator username and password and select Sign In.
In Site Administration, in the Features and Utilities section, select IP Restriction Configuration.
In the Security Groups Allowed, select the Edit button to edit the existing item.
Add or remove groups from the Allowed Groups field.
Select Save.

Adding Access to an IP Address

To add access to an IP Address, login to ShareVision with a user account that has Site Administrator permissions.
Select the gear in the upper right-hand corner and then select Site Administration:
When prompted, enter your ShareVision Administrator username and password and select Sign In.
In Site Administration, in the Features and Utilities section, select IP Restriction Configuration.
In the IP Addresses Allowed section, select Add New Item.
In the IP Address field, enter the new IP Address that will be allowed to connect to your ShareVision site.
Next, enter a Description (optional).
Ensure that the box next to Active is checked.
Select Save.
This IP Address will now be permitted to login to your ShareVision site.

Removing Access to an IP Address

To remove access from an IP Address, login to ShareVision with a user account that has Site Administrator permissions.
Select the gear in the upper right-hand corner and then select Site Administration:
When prompted, enter your ShareVision Administrator username and password and select Sign In.
In Site Administration, in the Features and Utilities section, select IP Restriction Configuration.
In the IP Addresses Allowed section, select the Edit button for the IP Address that you would like to deactivate.
Uncheck the box next to Active.
Save the change.
This IP Address will no longer be permitted to log in to your ShareVision site.

IP Restriction Configuration Reference Table

The table below will help you to verify if the IP Restriction Configuration has been set up properly.

Security Groups Allowed	IP Addresses Allowed	Feature Settings: IP Restriction Configuration	Results
No Security Groups Allowed have been added.	No IP Addresses have been added.	Active/Inactive IP Restriction Configuration check box is checked.	Login restrictions have been applied to your site. Only Site Administrators can log in.
Security Groups Allowed have been added.	No IP Addresses have been added.	Active/Inactive IP Restriction Configuration check box is checked.	Only users in the Security Groups added to the Allowed Groups field can log in.
No Security Groups Allowed have been added.	IP Addresses have been added.	Active/Inactive IP Restriction Configuration check box is checked.	Besides Site Administrators, any user connecting to your ShareVision site must connect with an IP Address that has been added to the IP Address list can log in.
Security Groups Allowed have been added.	IP Addresses have been added.	Active/Inactive IP Restriction Configuration check box is checked.	Besides Site Administrators, any user connecting to your ShareVision site must connect with an IP Address that has been added to the IP Address list, unless their username belongs to a Security Group that has been added to the Allowed Groups. Those users can log in from any IP Address.
If the Enable IP Restriction Configuration check box in Feature Settings: IP Restriction Configuration is unchecked and the Security Groups Allowed have been added and IP Addresses Allowed have been added.			No login restrictions have been applied to your site. Anyone with a ShareVision username can log in.