Does zone lockdown override IP Access Rules?

I’ve got a subdomain with a zone lockdown rule, that restricts access to everyone apart from a number of IP addresses. But we’re also trying to implement Access rules. Will the zone lockdown rule for override an Access rule for the same subdomain?
What is the correct way of doing it?

Zone Lockdown kicks in first, then Access. So If you configure both for the subdomain, users will be blocked unless you whitelist their IP in your Zone Lockdown rule.

If the IP is allowed in your Lockdown rules but isn’t allowed in your Access rules, they still need a token.

Using both is not necessary because (IIRC) you can choose IPs or subnets which are allowed to use a token for uat1 in your Access rules directly.


Thank you Mark, perfectly explained.

1 Like

This topic was automatically closed after 30 days. New replies are no longer allowed.

Please refer to our developers documentation for the correct order and priority here.