IP Whitelisting

Files.com offers an IP Whitelisting feature which can be used by organizations who want to require that only specific IP addresses are allowed to access their site.

Restricting access by IP address can be done on a sitewide basis, as well as for individual users.

This is an optional feature that we provide to allow compliance with your company security posture; it is not a required configuration.

Enabling IP Whitelisting

You can add IP addresses to the sitewide IP whitelist by going to Settings > Users > User Settings > IP Whitelist. Each whitelisted IP address should be entered on a separate line. You may specify a range in CIDR format, such as 192.168.1.0/27. Adding one or more IP addresses to the sitewide whitelist will force all users to access the site from one of these IP addresses, unless they have a user-specific whitelisted IP address, as described below.

You can add IP addresses to an individual user's IP whitelist by going to Settings > Users > [select a user] > Authentication > IP Whitelist. The selected user must access the site from one of the addresses on this list. If you are also restricting IP addresses via the sitewide IP whitelist at Users > User Settings, users with addresses that exist in either list will be allowed to log in. You may restrict a user to only access the site via one of the addresses on their individual IP whitelist (and not the sitewide IP whitelist) by selecting Bypass site IP whitelist located immediately below the individual user's IP whitelist.

Disabling IP Whitelisting

To disable IP Whitelisting, simply clear out all content for the sitewide and per-user IP whitelists using the same steps as above.

Interaction With Other Restrictions

If you maintain a list of Allowed countries or Disallowed countries, the IP Whitelist and country restrictions are combined such that a given connection must satisify all restrictions in order to be allowed.

For example, IP addresses that are associated with countries in your list of Disallowed countries will not be allowed to connect, even if they are in IP whitelists.

Logging

In general, Files.com platform logs all logins attempted by any users or systems. If there are any attempts to login from a country or IP address which is not allowed by the Administrator, Files.com platform rejects the authentication and corresponding login attempt will be logged under Users > [username] > History.