Skip to content
New AI Custom Form BuilderDescribe the intake form. It ships branded and end-to-end encrypted.AI Custom Form Builder is here See it build
Security

IP Restrictions: Lock Down Access to Your SendSafely Portal

Security teams spend a lot of time hardening credentials, but stolen credentials are still one of the most common ways attackers get in.

Brian Holyfield · 2 min read
IP Restrictions: Lock Down Access to Your SendSafely Portal

Security teams spend a lot of time hardening credentials, but stolen credentials are still one of the most common ways attackers get in. Today, we’re adding another layer of protection. IP Restrictions allow you to limit where your registered users can access SendSafely from, meaning your portal is only reachable from trusted networks like your office or VPN. Stolen credentials can’t be used from unknown locations. Hijacked sessions are shut down immediately if the source IP changes.

When enabled, SendSafely validates the source IP on every authenticated request. If the IP is not in your approved list, the request is blocked. For example, if a user’s IP changes mid-session (i.e., they disconnect from a VPN) that session is immediately denied. IP restrictions only apply to registered users. Guest users are unaffected, so secure file sharing with external parties continues uninterrupted.

IP Restrictions are enforced across every access path to SendSafely:

Configuring IP Restrictions

Admin users manage the Allowed IP range from the Enterprise Console, Configuration section. From here, admins can:

To prevent accidental lock out, Admins must have at least one valid IP range configured and your current IP address must be included in the list before changes can be saved.

IP Restriction Enterprise Console 2

IP Restrictions give security teams tighter control over where SendSafely can be accessed. If you’d like help configuring IP Restrictions or have questions about best practices, our support team is always happy to help.

IP Restrictions are available on the SendSafely Enterprise plan. For more information, contact success@sendsafely.com.


SendSafely: Integrated File Transfer for the Apps you Love

If you are looking for a secure way to send or receive files with anyone, or simply need a better way to transfer large files, our platform might be right for you.

Request a Demo

Frequently asked questions

Can I restrict SendSafely access to specific IP addresses?

Yes. SendSafely IP Restrictions limit registered users to approved networks, such as your office or VPN. SendSafely validates the source IP on every authenticated request and blocks requests from addresses outside the approved list, including a session whose IP changes mid-session.

Do SendSafely IP Restrictions apply to integrations and the API?

Yes. IP Restrictions are enforced on portal web sessions, login attempts, third-party integrations such as Zendesk, Salesforce, and Outlook, REST API usage, and SCIM API access, so stolen credentials can’t be used through another access path from an unapproved network.

Do IP Restrictions affect external recipients or guest users?

No. IP Restrictions only apply to registered users. Guest users are unaffected, so secure file sharing with customers and other external parties continues without interruption while your own staff are limited to trusted networks.

How do I configure IP Restrictions in SendSafely?

Admins configure IP Restrictions in the Enterprise Console under the Configuration section. From there they can enable or disable the feature, add IP ranges in standard CIDR notation, and view, update, or delete existing ranges. IP Restrictions are available on the Enterprise plan.

How does SendSafely stop admins from locking themselves out with IP Restrictions?

Before changes can be saved, at least one valid IP range must be configured and the admin’s current IP address must be included in the list. This prevents an admin from accidentally blocking their own access when enabling or editing the allowed ranges.

Written by Brian Holyfield