Print this page

What is the difference between Network Access, Session Settings, and Profile-Based IP Restrictions

Knowledge Article Number 000199100
Description


Learn the differences between adding IP ranges under Network Access, Session Settings, and Profiles. 

Resolution


Network Access (available for all editions)

 
  • New Lightning UI: Click on the gear icon | Setup | Security Controls | Network Access.
  • Setting trusted IP ranges under Setup | Security Controls | Network Access opens access to users accessing Salesforce from the trusted IP addresses. Users will not be challenged with the 5-digit verification code to authenticate the IP address from where they are logging in. All the customer apps and integration will not need the security token.
  • These can only be added or removed by a system administrator. Removing them from the Network Access will not revoke access from these IP addresses.

 

Session Settings (available only in Contact ManagerGroup, and Professional Edition)

 
  • Setting IP ranges in the Session Settings restricts access, and users will only be able to log in from the IP addresses listed.
  • Users will not be able to access Salesforce from any IP that is not listed in the range. They will receive a Restricted IP error when logging in.
  • This setting is recommended for organizations with users who log in only using VPN or their public corporate network IP addresses.
  • ​Please make sure that all the IP ranges for your apps and integration are added as well. 

 

Profile-Based IP Restrictions (Available in Enterprise, Unlimited, Developer)

 
  • You can set IP Restriction under each profile. This will restrict access, and users will only be able to log in from the IP addresses listed.
  • Users will not be able to access Salesforce from any IP that is not listed in the range. They will receive a Restricted IP error when logging in.
  • This setting is recommended for organizations with users who log in only using VPN or their public corporate network IP addresses.
  • ​Please make sure that all the IP ranges for your apps and integration are added as well. 



Reference Articles:

Restricting Login IP Ranges in the Enhanced Profile User Interface

Set Trusted IP Ranges for Your Organization





promote demote