search cancel

How to restrict access to the SMP Console for users on a specific IP range?

book

Article ID: 229374

calendar_today

Updated On:

Products

Client Management Suite

Issue/Introduction

Is it possible to restrict access to the SMP Web Console based on IP ranges? We have a need so that users on approved devices can access the Notification Server if they are on the LAN or on CEM, but the SMP Console is only available to users logged into a special VPN and hence the need of using a restricted IP range.

Environment

ITMS 8.x

Resolution

Security Roles can be used to limit access to the SMP Console or to limit access to specific locations in the SMP Console but to restrict specific users from restricted IP address ranges this would likely need to be setup through IIS, and this could be done using the "IP and Domain Restrictions" option in IIS.  If this isn't installed you can install this through:

Server Manager > IIS > Add Roles and Features > Server Roles > Web Server (IIS) > Security > IP and Domain Restrictions

Here's a Microsoft article on using "IP and Domain Restrictions":

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831785(v=ws.11)