IP Whitelisting - Securing Vibe Access
IP whitelisting is a powerful security feature that helps protect your Vibe admin console, portal, and apps by restricting access to only trusted IP addresses. When enabled, any connection attempt from an IP address not on the approved list will be denied — reducing the risk of unauthorised entry to your Vibe environment.
How It Works
IP whitelisting acts like a digital gatekeeper: you define which public IP addresses or IP ranges are trusted, and Vibe will only allow connections from those addresses. All others are automatically blocked. This creates a default-deny security model — a best practice for safeguarding administrative access and sensitive configuration areas.
Add a New Whitelist Rule
Only users with administrator access can perform these steps. If you don’t see the Security settings in your console, contact your Vibe admin or support@vibe.fyi
- Log in to your Vibe portal.
- Navigate to System Settings > Site Settings > IP Whitelists in the main menu
- Click NEW WHITELIST RULE
- Complete the rule details:
- Whitelist Type: Choose where this rule applies (e.g. Vibe Portal, Workplace screens, Employee Devices, Web Browser and Embedded Channels)
- Name: Give the rule a clear descriptive name (e.g., “HQ Office IP”)
- IPv4 Range: Enter the IP address or CIDR range you want to allow (e.g.,
203.0.113.0/24) - IPv6 Range: Enter the IPv6 address or CIDR range you want to allow (e.g.
2001:db8::/32)
- Whitelist Type: Choose where this rule applies (e.g. Vibe Portal, Workplace screens, Employee Devices, Web Browser and Embedded Channels)
- Click SAVE.
- Restart the device to apply the IP rule.
You can add multiple rules to support remote employees, VPN gateways, or partner networks.
Note: Simply saving the rule does not immediately apply the restriction. A device restart is required for the new IP restriction settings to become active.How to Find Your IP Address
Before you can whitelist an IP, you need to know what it is.
- For your computer or phone:
Search “what’s my IP address” in your browser or visit a service like whatsmyipaddress.com. This shows your public IP address that other services see when you connect. - For digital signage devices:
Connect the device to your network, then use your phone or computer on the same network to determine the public IP address seen by internet services.
Security Considerations
IP whitelisting significantly reduces the risk of unauthorised access by limiting who can even attempt to connect. However, it should be part of a multi-layered security approach alongside strong authentication, role-based access controls, and regular monitoring.
Use static or consistent IPs
Dynamic IP addresses that change frequently can cause access disruptions. If possible, whitelist the static IP of your office, VPN exit point, or corporate network.
Dynamic IP addresses that change frequently can cause access disruptions. If possible, whitelist the static IP of your office, VPN exit point, or corporate network.
Name rules clearly
Include location or function in rule names to make maintenance easier.
Include location or function in rule names to make maintenance easier.
Review regularly
Periodically review and remove stale rules to keep your whitelist clean and secure.
Periodically review and remove stale rules to keep your whitelist clean and secure.
FAQ
What exactly is IP whitelisting?
IP whitelisting (also called allowlisting) is a security method that only permits access from predefined IP addresses or ranges. All other attempts are blocked by default.
What happens if my IP changes?
If a whitelisted IP changes (common with dynamic residential IPs), access may be denied. Consider using a stable corporate VPN or static IP when possible.
Does IP whitelisting replace usernames and passwords?
No — it complements other security measures. Whitelisting adds an access restriction layer, but users still need valid credentials to log in.
Can IP whitelisting block legitimate users?
Yes — if a user’s IP isn’t on the whitelist, they won’t be able to access the restricted areas. Be sure to include all trusted networks and adjust rules as needed.
Is IP whitelisting suitable for remote teams?
It can be, but it works best when remote users connect through a VPN or medium that gives them a consistent IP address that can be whitelisted. Dynamic home IPs can be challenging.