Control site visitors’ access to the pages, page templates, folders, and assets in your site by setting the range of permitted IP addresses.
|Available in: Salesforce Classic|
|Available for purchase in: Enterprise, Performance, and Unlimited Editions|
Available (with limitations) in: Developer Edition
|To add and edit IP restrictions in Site.com:||Site.com Publisher User field enabled on the user detail page|
Site administrator role assigned at the site level
- On the Overview tab, either:
- Hover over the page, page template, folder, or asset in the All Site Content view and click .
- Click Add IP Restrictions. and click
- If not already selected, choose the item you want to restrict access to.
- Enter the first and last IP addresses of the permitted IP range—for example, 126.96.36.199 to 188.8.131.52. To enter a single IP address, just complete the Start Address field.
Both IP addresses in a range must be either IPv4 or IPv6. In ranges, IPv4 addresses exist in the IPv4-mapped IPv6 address space ::ffff:0:0 to ::ffff:ffff:ffff, where ::ffff:0:0 is 0.0.0.0 and ::ffff:ffff:ffff is 255.255.255.255. A range can’t include IP addresses inside of the IPv4-mapped IPv6 address space if it also includes IP addresses outside of the IPv4-mapped IPv6 address space. Ranges such as 255.255.255.255 to ::1:0:0:0 or :: to ::1:0:0:0 are not allowed.
- Click Add IP Range to add additional ranges.
- To redirect users with an invalid IP address to an alternative page, such as a user-friendly error page, specify the page in Access Denied Page. If you set this in the IP Restrictions view, the page is the default for all IP restrictions unless you override it at the item level.
You can redirect users to a page in your site or to an external site. Always use a prefix such as http:// when entering an external URL. If you don’t set an access denied page, users see a blank page that displays a default “Access to this resource is denied” message.
- Click Save.
To test the IP restrictions of a page template or site page, click Preview when the page is open. When you’re happy with your updates, publish the site to enable the restrictions.
- If an item inherits IP restrictions—for example, an asset in an IP-restricted folder—you can add additional restrictions to further narrow the range. Although the item doesn’t display the inherited values anywhere, the inherited IP range values do apply to the child item and only site visitors with valid IP addresses can access it.
- If you select a site page in the Access Denied Page drop-down list, users with an invalid IP address can view that page even if the entire site is restricted.
- Caching is disabled for any item that has IP restrictions. Additionally, if you update the IP restrictions of an asset, folder, or page, the system updates its URL in case proxy servers such as Akamai already cached the item.