Add IP Restrictions in Site.com
Control site visitors' access to the pages, page templates, folders, and assets in your site by setting the range of permitted IP addresses.
Required Editions
| Available in: Salesforce Classic |
Available for purchase in: Enterprise, Performance, and Unlimited Editions Available (with limitations) in: Developer Edition |
| User Permissions Needed | |
|---|---|
| To add and edit IP restrictions in Site.com: | Site.com Publisher User field enabled on the user detail page AND Site administrator role assigned at the site level |
Set IP restrictions to manage access your Site.com content.
-
On the Overview tab, either:
- Hover over the page, page template, folder, or asset in the All Site Content view
and select
| Add IP Restrictions. - Select Site Configuration | IP Restrictions and select Add IP Restrictions.
- Hover over the page, page template, folder, or asset in the All Site Content view
and select
- If not already selected, choose the item you want to restrict access to.
-
Enter the first and last IP addresses of the permitted IP range—for example,
112.122.0.1 to 112.122.0.123. To enter a single IP address, complete the Start
Address field.
Both IP addresses in a range must be either IPv4 or IPv6. In ranges, IPv4 addresses exist in the IPv4-mapped IPv6 address space ::ffff:0:0 to ::ffff:ffff:ffff, where ::ffff:0:0 is 0.0.0.0 and ::ffff:ffff:ffff is 255.255.255.255. A range can't include IP addresses inside of the IPv4-mapped IPv6 address space if it also includes IP addresses outside of the IPv4-mapped IPv6 address space. Ranges such as 255.255.255.255 to ::1:0:0:0 or :: to ::1:0:0:0 aren't allowed.
- Select Add IP Range to add additional ranges.
-
To redirect users with an invalid IP address to an alternative page, such as a
user-friendly error page, specify the page in Access Denied Page. If you set this in the
IP Restrictions view, the page is the default for all IP restrictions unless you override
it at the item level.
You can redirect users to a page in your site or to an external site. Always use a prefix such as http:// when entering an external URL. If you don't set an access denied page, users see a blank page that displays a default “Access to this resource is denied” message.
- Select Save.
To test the IP restrictions of a page template or site page, select Preview when the page is open. When you're happy with your updates, publish the site to enable the restrictions.
- If an item inherits IP restrictions—for example, an asset in an IP-restricted folder—you can add additional restrictions to further narrow the range. Although the item doesn't display the inherited values anywhere, the inherited IP range values do apply to the child item and only site visitors with valid IP addresses can access it.
- If you select a site page in the Access Denied Page dropdown list, users with an invalid IP address can view that page even if the entire site is restricted.
- Caching is disabled for any item that has IP restrictions. Additionally, if you update the IP restrictions of an asset, folder, or page, the system updates its URL in case proxy servers already cached the item.
