IP Address Restrictions

IP Address Restrictions is a feature to restrict access using source IP addresses.
For example, you can allow access to Kintone to just IP addresses of your offices, and deny accesses from external sources.
By limiting access locations and blocking accesses from external sources, you can effectively prevent unauthorized accesses from external third parties.

Image of IP address restrictions

Users Who Can Configure IP Address Restrictions

  • Kintone Users & System Administrator

For details, see "Types of Administrators".

Procedure

To configure IP Address Restrictions, specify the "global IP address" of the network from which you want to allow the access.
For the global IP address of your network, contact your network administrator or Internet service provider. You can specify multiple global IP addresses.
Described below is the procedure to configure IP Address Restrictions.

When Kintone Users & System Administrators Configure This Feature

  1. Access the "Kintone Users & System Administration" page.

  2. Under "Security", click Access Control.
    By default, "Allow all" is selected.
    Image of the Access Control option

  3. Click Allow specific IP addresses.
    If you select "Allow specific IP addresses":

    • IP Address:
      Specify global IP addresses of the network from which you want to allow the access. You can specify up to 2,900 IP addresses.
      Only IPv4 addresses can be specified. IPv6 addresses cannot be specified.
    • CIDR:
      CIDR must be filled in only when you want to specify a range of IP addresses.
  4. Click Save.
    It may take some time until the settings are applied.
    Once the configuration completes, an e-mail is sent to the e-mail address of the administrator.

If You Made Some Mistakes on Setting and Lost Access to the Service

If You made a mistake on setting IP Address Restrictions and lost access to Kintone, try one of the followings:

  • Click Reset URL in the e-mail you received when the setting was completed.
    This Reset URL expires after one hour.
  • Use Contact Us link to make an inquiry.

Settings Needed for Enabling Access While on a Business Trip or Working Remotely

By configuring IP Address Restrictions, you can allow access to Kintone only to specified IP addresses, and block accesses from other IP addresses.
However, you cannot specify global IP addresses for mobile networks such as 4G.
Therefore, when IP Address Restrictions has been configured, users cannot access Kintone from their mobile devices while on business trips or working remotely using mobile networks such as 4G.

You should consider device types that users use while on business trips or working remotely, and make appropriate settings.

  • If tablets or smartphones are used while on business trips or working remotely:
    Use of Two-Factor Authentication is recommended. If you use Two-Factor Authentication, you should select "Allow all" option.
    When there is any user who uses Two-Factor Authentication, you must complete the following.

    1. Select "Allow all" option for IP Address Restrictions.
    2. Inform users that they should enable Two-Factor Authentication.
      For details, see "Configure Two-Factor Authentication".
  • If personal computers are used instead of mobile devices while on business trips or working remotely:
    Use of IP Address Restrictions is recommended.

    1. Select "Allow specific IP addresses" option for IP Address Restrictions.
    2. Add networks that users use, as allowed networks.
    3. Inform users, who access while on business trips or working remotely, of the following.
      • They cannot access using mobile networks
      • They should use personal computers for access

Enhancing Security

By improving the password strength, you can enhance the security of your services.
You should do this if accesses are made from networks other than allowed networks.
For details, see "Specifying Password Complexity and Password Expiration".