> For the complete documentation index, see [llms.txt](https://docs.bluefletch.com/bluefletch-enterprise/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bluefletch.com/bluefletch-enterprise/product-guides/portal/admin/key-management/allowed-ip-addresses.md).

# Allowed IP Addresses

The Admin - Allowed IP Addresses page in BlueFletch Portal provides control over defining and managing authorized IP addresses for your organization's devices. Click here to access the page in your organization's Portal.

Enforcing Allowed IP Addresses strengthens endpoint security by restricting device access to the BFE cloud backend. This functionality ensures only requests originating from approved network IP addresses are processed. Any request from an unauthorized IP address is automatically ignored.

## How It Works

Allowed IP Addresses limit device access to the BFE cloud backend by controlling authorized IPs.

1. Authorized network administrators can manage the Allowed IP Addresses list within the BlueFletch Portal. This list defines the approved IP addresses from which devices are permitted to access the BFE cloud backend.
2. Only requests originating from IP addresses on the approved list can access the BFE cloud backend.
3. Requests originating from unauthorized IP addresses (not included on the approved list) are automatically denied access to the BFE cloud backend.

{% hint style="info" %}
Note: Adding and managing Allowed IP Addresses requires the Key Management role. Users with only the Admin role will not have access to the menu option for these actions.
{% endhint %}

## Managing Allowed IP Addresses

### Step 1: Accessing Allowed IP Addresses Settings

1. Log in to the BFE Portal.
2. Navigate to the Admin section.
3. Click on the Security tab.

### Step 2: Creating an Allowed IP Addresses List

1. Under the Security settings, choose Allowed IP Addresses. Locate the "Enforce Allowed IP Addresses for Devices" setting and enable it.
2. Once enabled, you'll need to add all your organization's network IP addresses to the Allowed IP Addresses list.

### Step 3: Verifying IP Addresses Request

1. When a device requests access to the BFE cloud backend, the system checks the originating IP address against the approved list.
2. If the IP address matches an authorized one, the request proceeds normally.
3. If the IP address isn't found on the list, the request is automatically rejected.

{% hint style="info" %}
[**Audit Logs**](/bluefletch-enterprise/product-guides/portal/admin/audit-logs.md) records all access attempts to the BFE cloud backend, including those originating from IP addresses outside the allowed range.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.bluefletch.com/bluefletch-enterprise/product-guides/portal/admin/key-management/allowed-ip-addresses.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.