10 · IP Blocking
Client data that only opens on your network.
A password is not a perimeter. Turia One lets you allow-list the office networks and VPN ranges your team is permitted to work from, block everything else, and keep an audit trail of every attempt that was turned away.
- Allow-list office, VPN and home IP ranges
- Per-role and per-user rules
- Full log of blocked access attempts
Access Control
ENFORCED100%
Sessions from allow-listed ranges
- Head office · 203.0.113.0/24 Allowed
- Branch · 198.51.100.0/24 Allowed
- Corporate VPN Allowed
- Approved remote users 14 IPs
- Blocked attempts (7d) 23
Allowed ranges
9
Blocked (30d)
104
Policy breaches
0
0
Sessions outside policy
100%
Attempts logged
Auto
Expiry on travel exceptions
Capabilities
What IP Blocking actually does for you.
Range allow-listing
Add individual addresses or CIDR ranges for offices, VPN concentrators and approved home connections.
Rules by role
Partners may work anywhere while operations staff are restricted to the office — one policy, different scopes.
Blocked-attempt log
Every rejected sign-in is recorded with time, user, address and approximate location.
Temporary exceptions
Grant a time-boxed exception for travel that expires on its own, so nobody has to remember to revoke it.
Country restrictions
Block whole geographies outright when you have no legitimate users there.
Alerting
Repeated blocked attempts on one account notify your administrators immediately.
How it runs
Four steps, and then it looks after itself.
Configuration is a one-off. After that the module runs on your schedule and only asks for a human when something genuinely needs one.
- 1
Map
Collect the IP ranges your team legitimately works from.
- 2
Scope
Apply the policy to the roles that need restricting.
- 3
Enforce
Access outside the allow-list is refused and logged.
- 4
Audit
Review blocked attempts and exception grants during security reviews.
FAQ
IP Blocking, answered
Still unsure whether it fits how your team actually works? Ask us the awkward version of the question — we would rather answer it now than after you have migrated.
Talk to us What about employees with dynamic home IPs?
Use a VPN range for remote staff, or grant a time-boxed exception that expires automatically.
Does this cover the mobile app?
Yes. The same policy applies to mobile sessions, with an option to exempt mobile for field roles.
Can we restrict by country?
Country-level blocking is available alongside address and range rules.
What do blocked users see?
A clear message telling them access is restricted by policy, plus a route to request an exception from an administrator.
Pairs well with
Put IP Blocking to work this week.
Start with this module alone, or switch on the rest of the platform alongside it. Either way, setup takes minutes rather than a quarter.
No credit card required · Setup in under 10 minutes · Cancel anytime