Application access set to IP range but asks for email

nikoloskid · January 4, 2023, 9:20am

Hi, I have set up Zero trust and I want to restrict access to one of the exposed services.
I have added my public IP in the Include rule, but when I open the website it asks me email.
Is it possible to make it just to look for IP and not asks for code also?

Thanks!

Cyb3r-Jak3 · January 4, 2023, 9:47pm

You should make a bypass rule for the IP address

nikoloskid · January 4, 2023, 9:58pm

Thanks for the reply, and how I do I block the rest?

Cyb3r-Jak3 · January 4, 2023, 11:29pm

The other access rule will make sure that requests have to go through the email login flow and you can just set that up so no one is allowed.

kjohnson1 · January 6, 2023, 6:14pm

Your best option would be to use a Service Auth rule action. That will check the IP address but will not render a login screen prompt. You can keep a second policy with an action set to “allow” this will prompt all other users to login to the application.