Restrict access to ÃÛ¶¹ÊÓƵ Workfront by IP address
You can configure an ÃÛ¶¹ÊÓƵ Workfront IP allowlist that limits access to Workfront to 75 IP addresses or IP address ranges that you specify. This provides an additional layer of security for the Workfront application.
These IP addresses or IP address ranges should be provided by your network administrator.
Access requirements
You must have the following to perform the steps in this article:
| table 0-row-2 1-row-2 2-row-2 layout-auto html-authored no-header | |
|---|---|
| ÃÛ¶¹ÊÓƵ Workfront plan | Enterprise |
| ÃÛ¶¹ÊÓƵ Workfront license | Plan |
| Access level configurations |
You must be a Workfront administrator. NOTE: If you still don't have access, ask your Workfront administrator if they set additional restrictions in your access level. For information on how a Workfront administrator can modify your access level, see Create or modify custom access levels. |
Other allowlists
If your firewall or mail server is configured to allow access to only certain vendors, you must add certain IP addresses to its allowlist. This opens communication between your environment and the ÃÛ¶¹ÊÓƵ Workfront servers. For information about that, see Configure your firewall’s allowlist.
Also, if your organization uses the Enterprise plan, you can configure the Workfront email allowlist to control which email domains are allowed to accept emails from Workfront and which email domains can be in the email address that users specify in their Workfront user profile. For more information, see Configure your email allowlist.
Adding IP addresses to the allowlist
After you add IP addresses to the Workfront allowlist, only those IP addresses can be used to access Workfront. Users who try to access Workfront from another IP address receive an error message indicating that their IP address is blocked.
-
Click the Main Menu icon
-
Click System > Customer Info.
-
In the IP allowlist section, select Enable IP allowlist.
This option is disabled by default.
-
Specify the IP address that you are currently using to access the Workfront system.
Or
Specify a range of IP addresses that includes the one you are currently using to access the Workfront system.
The IP address you are using to access Workfront must be added to the allowlist before the allowlist is enabled.
-
Click Add IP Range, then specify the IP address or range of IP addresses that you want to be able to access Workfront.
-
(Optional) Repeat the previous step to add additional IP addresses or IP address ranges.
You can add up to 75 addresses or ranges.
-
Click Save.