Skip to main content
You may need to block certain IP addresses from accessing your Admin account or Kibo storefronts in certain environments. Kibo eCommerce provides a security feature that allows you to blacklist IP addresses (currently, only IPv4 addresses are supported). When you configure the feature, Kibo denies access to users with blacklisted IP addresses. The IP restrictions described here govern access to Admin and storefronts. To restrict where application (API) credentials can authenticate from in Dev Center, see IP Filtering instead. Security rules are managed via CSV files that contain a list of blocked and whitelisted addresses. In the Admin, you will be able to download the existing security rules (if none exist, this file will be blank) and upload the file containing new security rules.

​
Update and Enable IP Address Security Rules

Follow the below steps to enable and/or update security rules. If you make changes to your security rules file and upload a new version, the new version will permanently overwrite the previous version.
  1. Go to System > Permissions > IP Restrictions.
  2. Click Download to download the existing security rules file to your local machine. If you haven’t configured security rules before, this file is blank.
  3. Open the security rules file and add your specific rule information, including the IP start range, end range, and site ID. You can add rows for additional security rules. If you leave the site ID blank, the IP address is blocked at the tenant level, across all of your sites. You also have the ability to block all IP address to access Admin except for a few given ranges. To do this, create a set of rules where isWhiteListis True for at least one entry. For example:
  4. Save and close the file.
  5. In Admin, click Upload File to upload your new security rules file to Kibo eCommerce.The IP Restrictions page displaying your IP address and Upload File button
  6. Enable Enable IP Address Security Rules.
  7. Click Save. It may take approximately 10 minutes for a new IP block to kick in.
Note that you could lock yourself and your company from the Kibo admin with badly configured rules, so make sure that your rules are set correctly when setting whitelisting rules.