Policy Server Guides › Policy Server Configuration Guide › Global Policies, Rules, and Responses › Allowable IP Addresses for Global Policies

Allowable IP Addresses for Global Policies

You specify that a global policy should only fire for users who access the policy's resources from a specific:

• IP address
• host name
• subnet mask
• range of IP addresses

For example, if you include a rule that allows access to resources in the policy, and then you specify a range of IP addresses, only those users who login in from one of the specified IP addresses will be allowed access to the protected resources.

More information:

Allowable IP Addresses for Policies

Specify a Single IP Address for a Global Policy

You specify a single IP address to ensure that the global policy only fires for users who access the policy’s resources from the specified IP address.

To specify single IP address

1. Open the policy.
2. Click Add in the IP Address group box.

   Settings for IP addresses appear.

3. Select the Single Host radio button.

   Settings specific to a single host appear.

4. Enter the IP Address, and click OK.

   The IP address appears in the IP Address group box.

   Note: If you do not know the IP address, but have the domain name for the address, click DNS Lookup. Enter a fully qualified host name to look up the IP address.

5. Click Submit.

   The policy is saved.

Add a Host Name for a Global Policy

You specify a host name to ensure the global policy only fires for users who access the policy’s resources from the specified host.

To specify a host name

1. Open the policy.
2. Click Add in the IP Address group box.

   Settings for IP Addresses appear.

3. Select the Host Name radio button.

   Settings specific to a host name appear.

4. Enter the host name, and Click OK

   The host name appears in the IP Address group box.

5. Click Submit.

   The policy is saved.

Add a Subnet Mask for a Global Policy

You specify a subnet mask to ensure the global policy only fires for users who access the policy’s resources from the specified subnet mask.

To add a subnet mask

1. Open the policy.
2. Click Add in the IP Address group box.

   Settings for IP Addresses appear.

3. Select the Subnet Mask radio button.

   Settings specific to the subnet mask appear.

4. Enter an IP address in the IP Address field.

   Note: If you do not know the IP address, but have the domain name for the address, click DNS Lookup. Enter a fully qualified host name to look up the IP address.

5. Enter a subnet mask in the Subnet Mask field.
6. Click OK.

   The subnet mask appears in the IP Address group box.

7. Click Submit.

   The policy is saved.

Add a Range of IP Addresses for a Global Policy

You specify a range of IP addresses to ensure that the policy only fires for users who access the policy’s resources from one of the IP addresses included in the range of addresses.

To add a range of IP addresses

1. Open the policy
2. Click Add in the IP Address group box.

   Settings IP Addresses appear.

3. Select the Range radio button.

   Settings specific to a range of IP addresses appear.

4. Enter a starting IP Address in the From field.

   Note: If you do not know an IP address, but have the domain name for the address, click DNS Lookup. Enter a fully qualified host name to look up the IP address.

5. Enter an ending IP address in the To field.
6. Click OK.

   The range of IP addresses appears in the IP Address group box.

7. Click Submit.

   The policy is saved.