IP filtering
Allow clocking in only from your company's internet connections.
Every internet connection goes out with a public IP address: the office fibre line, the Wi-Fi in a warehouse, a phone's mobile data. With IP filtering you set which addresses clocking in is allowed from. That way you make sure employees clock in while connected to the company network.
You will find this screen in Settings › Allowed IPs.
How it works
- If the list is empty, there is no restriction: people can clock in from any connection. The screen says so with the text "No IP restrictions are being applied".
- As soon as you add an address, employees can only clock in from the addresses on the list.
- The address has to match exactly. Ranges are not accepted.
- It applies to all the company's employees.
- In addition, the General Administrator can add addresses for a single employee in Inallow Admin, under Allowed IPs in their record (see Create an employee). That employee can clock in from the addresses on this list and from their own, and is restricted even if this list is empty.
Add or remove addresses
Add a row
Click Add IP.
Type the address
In Allowed IP, type the connection's public IP address, for example 203.0.113.25. In Description, add a note so you can recognise it, for example "Bilbao office". The description can be up to 64 characters.
Save
Click the Save button in the header. While there are unsaved changes, the button is highlighted. When you save, the message IPs updated appears.
To remove an address, click the bin button on its row and then Save. Rows with no address are discarded when you save.
Only public IPv4 addresses are accepted. If you type a private address (such as those starting with 192.168) or one in the wrong format, the message Invalid IP appears.
Which clock-ins are restricted
The restriction applies when starting, pausing, going out on leave and ending the working day from:
- The clock-in app for mobile and the web app.
- The tablet. The tablet has to be connected to a network whose address is on the list.
It also applies to clock-ins with Work-from-home on: from home, the employee will not be able to clock in unless their connection is on the list.
Clock-ins that an administrator creates or corrects from the admin panel are not affected.
What the employee sees
- If they try to clock in from an address that is not on the list, the app shows the Access Denied screen: "Your current IP address is not authorized to perform this action."
- While the restriction is active, clock-ins made offline cannot be sent. The app shows "You do not have permission to clock-in while offline".
An employee using their phone's mobile data goes online with their carrier's address, so they will not be able to clock in. Ask them to connect to the office Wi-Fi.