Allow sign-in only from the office
Limit the default policy to your office addresses, then make a named exception for people on the road.
- ⏱ 3 min
- Who: Admins
- Works in: Browser, Mac, Windows
01
Step 1: Open IP access.
Admin → IP access.
chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
1chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
102
Step 2: Lock down the default.
Edit Everyone else, choose Allow only from listed IPs, and press Add my IP.
Tip:The CEO can always sign in, so you can’t lock yourself out.chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
Edit Everyone elseNameEveryone elseAllow from anywhereAllow only from listed IPsPeople in this policy can only use Smack from these addresses.
203.0.113.10Lisbon office198.51.100.0/24Toronto officeAdd IPAdd my IPYour current IP: 203.0.113.10
CancelSave2chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
Edit Everyone elseNameEveryone elseAllow from anywhereAllow only from listed IPsPeople in this policy can only use Smack from these addresses.
203.0.113.10Lisbon office198.51.100.0/24Toronto officeAdd IPAdd my IPYour current IP: 203.0.113.10
CancelSave203
Step 3: Add an exception.
Add policy “Travelling staff”, Allow from anywhere.
chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
New policyNameTravelling staffAllow from anywhereAllow only from listed IPsPeople in this policy can use Smack from any address.
PeopleAdd peopleCancelSave3chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
New policyNameTravelling staffAllow from anywhereAllow only from listed IPsPeople in this policy can use Smack from any address.
PeopleAdd peopleCancelSave304
Step 4: Put people in it.
Add Liam and Amara to Travelling staff.
chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
Edit Travelling staffNameTravelling staffAllow from anywhereAllow only from listed IPsPeople in this policy can use Smack from any address.
PeopleLOLiam O’ConnorAOAmara OkaforAdd peopleCancelSave4chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
Edit Travelling staffNameTravelling staffAllow from anywhereAllow only from listed IPsPeople in this policy can use Smack from any address.
PeopleLOLiam O’ConnorAOAmara OkaforAdd peopleCancelSave405
Step 5: Check it works.
Look at Recent blocked attempts after a test from outside.
chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Recent blocked attempts
Person Address Attempts Policy DMDaniel MensahToday 09:47:12 81.2.69.160 3 attempts Remote engineering 5chat.northwind.exampleIP access
Decide which networks each person can use Smack from.
Recent blocked attempts
Person Address Attempts Policy DMDaniel MensahToday 09:47:12 81.2.69.160 3 attempts Remote engineering 5
IP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
IP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
People in this policy can only use Smack from these addresses.
Your current IP: 203.0.113.10
IP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
People in this policy can use Smack from any address.
IP access
Decide which networks each person can use Smack from.
Each person is in exactly one policy. Everyone not in another policy follows the default.
New policyEveryone elseDefault
Allow only from listed IPs
Lisbon office203.0.113.10Toronto office198.51.100.0/24
Everyone not in another policy
Travelling staff
Allow from anywhere
Liam O’Connor, Amara Okafor
Remote engineering
Allow only from listed IPs
Lisbon office203.0.113.10VPN gateway192.0.2.44
Jonas Weber, Hana Kobayashi, Daniel Mensah
Always allowed (CEO): Priya Raman
People in this policy can use Smack from any address.
IP access
Decide which networks each person can use Smack from.
Recent blocked attempts
| Person | Address | Attempts | Policy |
|---|---|---|---|
| DMDaniel MensahToday 09:47:12 | 81.2.69.160 | 3 attempts | Remote engineering |
That’s it.
Smack now answers sign-ins only from your office addresses, except for the people you put in Travelling staff.
Was this helpful?