1. Home
  2. /Guides
  3. /Admin
  4. /Security
  5. /Create an IP allowlist

Create an IP allowlist

Protect your projects against unauthorized use by restricting access to a set of trusted IP addresses.

Define one easy-to-maintain allowlist per company account. Each allowlist can contain an unlimited number of network ranges and/or IP addresses that can access your company’s project dashboards and API communication endpoints.

Prerequisites

Before creating your IP Allowlist, plan your approach and gather user data. Doing this preliminary work will significantly reduce support calls related to project access after you build your allowlist.

These rules and guidelines make it easier to create and maintain your company’s IP Allowlist:

  1. Inventory all individuals that must have access to your company’s projects, then identify and list their IP addresses. Your list may include company employees, outside contractors, and agency employees.

  2. Any user who has access to your company’s projects should be allowlisted.

    For messaging projects, there are two ways to get to a list of project team members:

    1. From a project, go to Settings, then select Manage for Team Access.

    OR

    1. Select the account menu icon () in the dashboard header, then select Team Management.
    2. Under Share project, select the open icon () next to a project name.

    Now you can note the email addresses under Team Member. Repeat for each of your messaging projects.

    For Wallet projects, select the account menu icon () in the dashboard header, then select Team Management. If you are in Team Management for Wallet, select the link to go to Team Management for Wallet projects. Now you can note the email addresses under Accepted invitations. Repeat for each of your Wallet projects.

  3. Add your own IP address to the allowlist first. To make that easy, your IP address is listed at the top of the IP Allowlist screen.

  4. If anyone, including you, needs to have access to a project when working remotely (from home, hotel, convention center, coffee shop, etc.), his or her remote IP address must be included on the allowlist in addition to the work IP address. Bear in mind that some internet service providers periodically rotate their customers’ IP addresses. If this is a common occurrence, consider recommending that individuals working remotely tunnel in to your company’s network via a corporate virtual private network (VPN) that routes all their traffic through the corporate network.

Creating an allowlist

 Warning

When you save the first IP address or range in the allowlist, you will block all individuals not originating from that saved IP address or range They will not be able to access any of your company’s projects. Consider creating the initial allowlist off-hours to avoid inadvertently blocking a colleague’s access to a project.

 Important

  • If you need to access your company’s Airship account from more than one location / IP address, add each of those IP addresses in this initial session.
  • If your current IP address is not in the IP range you’re attempting to add or isn’t in the saved IP ranges, you will get a validation error. The system will prevent you from locking yourself out in the same session you’re setting up.
  • Duplicate address entries and overlapping address blocks will not cause error messages.

Company account Owners can manage IP allowlists:

  1. Select the account menu icon () in the dashboard header, then select IP Allowlist.
  2. Select Add IP and enter your current IP address, which is displayed at the top of the screen.
  3. Select Add IP and enter an individual IP address or a block of IP addresses using CIDR  notation.
  4. Select Save allowlist.