Purpose Statement

This feature allows departments to manually add approved IP addresses to their allowlist, enabling administrators to grant access to specific network ranges or individual IP addresses for users who need to access the First Due system. This provides enhanced security control by restricting system access to pre-approved network locations while maintaining flexibility for authorized users.

Background Information

IP address allow listing is a security feature that restricts First Due system access to specific, pre-approved IP addresses or ranges. This is particularly valuable for departments that want to limit access to office networks, fire stations, or other designated locations. When IP address restrictions are enabled, users can only access the system from approved IP addresses. Users attempting to access from non-approved locations will need to submit requests for IP address approval, which administrators can then review and manually add to the approved list.

Important Note: This feature must be activated by First Due support before it can be used. Contact your Client Success Manager or submit a Support Ticket to enable IP address restrictions for your department.

Required Permissions

• Administrator permissions are required to access User Registered IP Address management
• Users must have Admin module access to navigate to the IP address management section

Video

Step-by-Step Guide

1. Navigate to IP Address Management Click on Admin > User Registered IP Address to access the IP address management interface.

2. Initiate New IP Address Entry Click on "Add New IP Address" to begin adding a new approved IP address or range.

3. Configure IP Address Details Enter the following information:

• Start IP Address: Enter the beginning IP address of the range (or the single IP address if adding just one)
• End IP Address: Enter the ending IP address of the range (use the same IP as start address for single IP entries)
• Description: Provide a clear description identifying the location or purpose (e.g., "Main Fire Station," "Administrative Office," "Battalion Chief Home Office")
  

4. Add Additional Addresses (Optional) If you need to add multiple IP addresses or ranges in the same session:

• Click "Add New" to create additional entry fields
• Repeat step 3 for each additional IP address or range
• Continue until all required IP addresses are entered
  

5. Save Configuration Click "Add" to save all entered IP addresses to the approved list.

6. Verify Addition Confirm that your manually added IP addresses appear in the approved IP address list with the correct details and descriptions.

Best Practices

Planning and Documentation:

• Maintain a record of all approved IP addresses with their purposes and the responsible personnel
• Use descriptive names that clearly identify the location or user associated with each IP address
• Regularly review and audit the approved IP list to ensure it remains current and necessary

Security Considerations:

• Only add IP addresses that are essential for department operations
• Avoid adding overly broad IP ranges unless necessary for network infrastructure
• Consider the security implications of each IP address addition
• Implement a formal approval process for IP address requests

Network Management:

• Coordinate with your IT department to understand static vs. dynamic IP assignments
• Document any changes to network infrastructure that might affect approved IP addresses
• Test access from newly added IP addresses to ensure proper functionality

Troubleshooting & FAQs

Q: Why can't I access the IP Address management feature? A: This feature must be enabled by First Due support. Contact your Client Success Manager or submit a Support Ticket to activate IP address restrictions for your department.

Q: A user is still unable to access the system from an approved IP address. What should I check? A: Verify that the IP address was entered correctly, including the proper range. Check if the user's actual IP address matches what was added to the approved list, as some networks use dynamic IP assignment.

Q: How do I handle users with dynamic IP addresses? A: For users with dynamic IP addresses, you may need to add a broader IP range provided by their internet service provider, or work with your IT department to assign static IP addresses for critical personnel.

Q: Can users request IP address approval themselves? A: Users can submit requests for IP address approval, but only administrators can manually add them to the approved list through this process.

Q: What happens if I enter an incorrect IP address range? A: Incorrect IP ranges may prevent legitimate users from accessing the system or allow unintended access. Double-check all entries and test access after making changes.