The IP Allow List feature adds an extra layer of security by allowing administrators to specify trusted IP addresses from which users can access the application. With this feature, only requests originating from IPs on the allow list can reach the application, blocking unauthorized or suspicious access attempts automatically.
Configuring the IP Allow List
Where to Find It
You can configure the IP Allow List by navigating to:
System Settings > Security > IP allow list
By default, your IP address will be added to the list and ftrack application will not let you remove your address from the list.
Editing the List
To edit the allow list:
- Click the Add IP Address button to open the configuration modal.
- Use the IP Address field to input a trusted IP in one of the following formats:
| Notation | Description | Example |
| IPv4 | Four decimal decimal numbers ranging from 0 to 255 separated by a .(dot) symbol | 192.168.0.1 |
| IPv6 | Eight hexadecimal values ranging from 0000 to ffff separated by a :(semicolon) symbol. Short notation is also accepted. |
2001:0000:130F:0000:0000:09C0:876A:130B or 2001:0000:130F::09C0:876A:130B |
| IPv4 CIDR block | Combination of an address and a subnet divided by /(slash) symbol. | 192.168.0.0/16 |
| IPv6 CIDR block | Combination of an address and a subnet divided by /(slash) symbol | 2001:db8::1000/124 |
Example: Adding a Range of IPs
To allow a range of IP addresses (e.g., for dynamic network configurations), you can use a CIDR block. For example:192.168.0.0/16 allows all addresses in the range 192.168.0.0 to 192.168.255.255.
Important Note for Client Reviews
If you collaborate with external users for Client Reviews, ensure their IP addresses are included in the allow list. Without being added, collaborators will not have access to the application, even if invited.
Enabling IP Restrictions
When your configuration is complete, enable the restriction by clicking the Enable button. Once restrictions are enabled, access to the application is limited to the IPs specified in the list.