Restrict WARP connections from specific public IP addresses?

Zero Trust WARP
1

What is the name of the domain?

na

What is the issue you’re encountering

Is it possible to restrict connections to the Zero Trust/WARP VPN from specified public IP Addresses?

What steps have you taken to resolve the issue?

Hi all,
I am demoing Cloudflare Zero Trust for a client as a possible VPN solution for WFH employees. They would like to set WARP to only allow VPN connections from their WFH users’ home IP addresses. They essentially do not want end users to be able to roam with WARP; They want it to only be accessible from fixed locations.
Is it possible to do this? I’ve looked through documentation, but I don’t see a way to restrict access from specific IPs for specific employees.
Thanks in advance.

3

Hi,

You can do this by configuring Access Policies in the Zero Trust dashboard. There are Selectors you can add to your rule such as IP ranges, Country, and etc. :

You can also use Device Posture checks to ensure that only devices meeting specific security criteria can access your network, such as the IdP used to authenticate:

4

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.