Access Control Settings: Client IP

HTTP > Configuration > Access Control Settings | Client IP

In addition to the default setting that allows all clients on your network to access the IWSVA proxy, IWSVA can be configured to allow HTTP access only to those clients that you explicitly specify. If your organization does not allow everyone on your network to access the Internet, this is a convenient way to block HTTP access by default.

Client Access Control supports both IPv4 and IPv6 clients. When selecting policies, both IPv4 and IPv6 policies will appear. Client Access Control accepts a single IPv6 address, an IPv6 range, or an IPv6 mask similar to what has been supported with IPv4.

You can have IWSVA prevent all clients, that are not listed in the Client IP address list, from accessing the Internet.  

1. Specify the IP address or range of IP addresses that you will grant Internet access.

2. Type a descriptive name in the Description field. (40 characters maximum)

3. Next, choose Enable HTTP Access Based On Client IP. After enabling, only those users specified there will be able to connect to the Internet. All others are denied.

The following rules apply if using IPv4:

2. IP entries should be in the a.b.c.d format.  

3. Masks can be in the a.b.c.d format or specified as numbers of bits (0-32).

4. For entries where the mask is omitted, a default mask of 255.255.255.255 is assumed.

Formats:

• IP

• IP start range to end range

• IP/IP mask

Examples:

• 192.168.0.150
  # Only the machine whose IP address is 192.168.0.150

• 192.168.0.10-192.168.0.20  
  # Covers machines whose IP falls in the range 192.168.0.10 to 192.168.0.20

• 192.168.1.0/24
  # An alternate of all the machines in 192.168.1.x

See also:

• Server IP Approved Lists
• Destination Ports
• HTTPS Ports