Configuring IP Restrictions in SmartSuite
Plan Availability | Enterprise and Signature plans only |
Permissions | Administrator: Can configure IP restrictions. |
Related Reading |
IP Restrictions enhance workspace security by allowing administrators to control access based on specific IP addresses or ranges. This feature ensures that only authorized users accessing SmartSuite from approved locations, such as through a company VPN or physical office, can log in.
What Are IP Restrictions?
IP Restrictions enable workspace administrators to create an allowlist of IP addresses. This ensures that only connections from the predefined addresses or ranges can access the workspace, providing an additional layer of security. Unauthorized access attempts are denied.
How Do IP Restrictions Work?
When a user attempts to log in, SmartSuite checks their IP address against the allowlist.
If the IP address matches an entry in the allowlist:
Access is granted.
If the IP address does not match:
Access is denied, and the user cannot log in.
Setting Up IP Restrictions
Follow these steps to configure IP restrictions for your workspace:
Step 1: Access Workspace Administration
Log in with Administrator permissions.
Click your profile icon in the top-right corner.
Navigate to Workspace Administration.
Step 2: Open Security Settings
In the Workspace Administration menu, locate and select the Security tab.
Step 3: Define the Allowed IP Addresses
In the IP Restrictions section, input the IP addresses or ranges you wish to allow.
For individual addresses, enter them directly (e.g.,
192.168.1.1).For ranges, use CIDR notation (e.g.,
192.168.1.0/24).
Double-check entries to avoid inadvertently blocking authorized users.
Be sure to include your current IP address in the list of allowed IPs.
Step 4: Enable IP Restrictions
Once the allowlist is complete, toggle the Enable IP Restrictions option.
NOTE: You will not be able to enable IP Restriction if your current IP address is not in the allowlist, or part of a specified allowed IP range.
The system immediately applies the restrictions.
Step 5: Save Changes
Changes are saved automatically as new IPs are added or removed.
Maintaining the Allowlist
Keeping your IP allowlist up to date is essential. Regularly review and adjust entries to:
Add new authorized IPs.
Remove outdated or unnecessary entries.
Ensure all users can access the workspace without disruptions.
Practical Scenarios and Use Cases
Securing Workspace Access
Scenario: A company mandates that employees only access SmartSuite through the corporate VPN.
Solution: Use IP Restrictions to allow only the VPN’s IP address range.
Limiting Access to Specific Locations
Scenario: A workspace should only be accessed from the main office.
Solution: Configure the office’s static IP address in the allowlist.
Blocking Unauthorized Locations
Scenario: An administrator wants to ensure no one logs in from unknown or public networks.
Solution: Enable IP Restrictions and allow only trusted IP ranges.
By implementing IP Restrictions, SmartSuite offers enterprise-level control to secure your workspace access. For further assistance, contact us at support@smartsuite.com.
FAQ
How will this impact my SmartSuite automations and third party integrations?
How will this impact my SmartSuite automations and third party integrations?
SmartSuite automations will continue to work without any additional configuration, but any third party integrations will need to be explicitly added as a whitelisted IP address to continue functioning after this is enabled for the workspace.
Can I still use the mobile app?
Can I still use the mobile app?
The IP restrictions are also enforced in our mobile app, so to use SmartSuite for an IP Restricted workspace you'll need to make sure that the IP addresses and ranges of your mobile device are whitelisted by your administrator.
Can Shared Views or Shared Forms still be accessed outside of these allowed IPs?
Can Shared Views or Shared Forms still be accessed outside of these allowed IPs?
In order to keep your data secure, Shared Views and Form Views are part of the IP address restrictions and can only be accessed from the IP addresses and ranges specified by the workspace administrators.