Controlling User Access by IP Address

By default, all IP addresses are granted access to EFT. EFT allows you to grant access to only one specific IP address or a range of IP addresses, or deny access to one specific address or a range of addresses. EFT can control TCP/IP access at EFT, Site, or Settings Template, or per user. Refer to Controlling Access to the Site by IP Address for details of banning IP addresses.

IP address changes are propagated to the DMZ Gateway whenever the policy is modified in the administration interface or by the auto-ban logic.

To grant/deny access by IP Address for a Settings Template or user account

In the administration interface, connect to EFT and click the Server tab.
On the Server tab, click the Settings Template, or user account, and then click the Connections tab.
In the Network Usage & Limits area, next to IP access/ban list, click Configure. The IP Access Rules dialog box appears.
- To add an IP address to the Rules, click Add. Specify the IP address or mask, click whether to Allow or Deny the address, and then click OK. CIDR notation is supported for both IPv4 and IPv6 literals. For example: 001:cdba:9abc:5678::/64 for blocking an IPv6 LAN or 192.168.29.0/24 for an IPv4 network.
- To remove a Rule, click it in the list, and then click Remove. A confirmation prompt appears. Click Yes.
- To edit a Rule, click it in the list, and then click Edit. Edit the address, then click OK to save your edits.
- To test whether an IP address is banned or allowed, click Test IP. The Test IP Connection dialog box appears.
- - Provide an IP address to test, and then click Test. The Result (Allowed or Denied) and the Reason the IP is allowed or denied appear in the dialog box.
Click OK to close the dialog boxes.
Click Apply to save the changes on EFT.