IP fencing

[bobt]

What terms did you try when SEARCHING for a solution: IP fencing, IP whitelisting

Write your message below:

Is there any way to limit staff access to Hesk so that they can only login from a static IP address (i.e. within customer's work environment?)

[Klemen]

That's not something that can be done within Hesk, but should be possible to set up using your web server (you can use htaccess for example in Apache to restrict access to the admin folder).

[bobt]

what would the code for this look like, is there an example you can share?

[Klemen]

For an Apache server:
https://www.google.com/search?q=htaccess+allow+deny+ip

If you don't have Apache, try a similar search on Google for your server type.

Again, this is not something that can be set up from within Hesk, it is a server-side configuration.

[shadedk]

If you use NGINX as a web server you can add:

location /where_hesk_is_installed/ {
allow 192.168.0.0/24;
deny all;
}

Change 192.168.0.0 to your internal network, add more allow lines for several networks.

[Klemen]

Great, thanks for sharing NGINX configuration!