Security is crucial in NetSuite. The primary security measure NetSuite recommends is using Two-Factor Authentication (2FA). For an added layer of security, however, account administrators may wish to enable IP Address Rules in NetSuite. Let’s take a quick look at setting this feature up and using it in NetSuite.
Setting Up IP Address Rules in NetSuite
You can enable this feature under the Access section of the Company tab in Enable Features. After enabling this feature, you’ll need to delineate your address rules. In other words, which IP addresses are allowed? You can set these rules both on the company level as well as on the individual employee level.
Setting Up Company Address Rules
You can set company-wide IP address rules by navigating to the Company Information page (Setup > Company > Company Information). On this page, you’ll see the field Allowed IP Addresses. Here, you can list all the IP addresses that you want to grant access to your NetSuite account, separated by commas or spaces. You can include up to 4,000 characters in this text box.
Once you have saved your changes to the Company Information page, any users wishing to access your account will need to log in on a computer that is covered by the IP addresses you have delineated.
Setting Up Individual Address Rules
Employees will, by default, inherit the IP address rules of the company. However, you may find yourself in the situation of needing to either limit a user’s access or expand it. You can do this on the Access tab of the Employee record. Under the Access tab, you’ll see the checkbox Inherit IP Rules From Company and the text box IP Address Restriction.
If you want to limit a user’s access, simply deselect the checkbox Inherit IP Rules From Company and include the specific IP addresses that this employee can use to access NetSuite in the IP Address Restriction text box. Alternatively, if you want to give an employee access to NetSuite using IPs in addition to the addresses listed on the Company Information page, then you would leave Inherit IP Rules From Company checked and include the additional IP addresses in the text box.
Tips for IP Address Rules in NetSuite
That’s the basic idea of setting IP address rules. But before we go, let’s look at some quick tips for using IP address rules effectively.
Best Practices for Entering IP Address Rules
First, it’s important to note that you will need to use an IPv4 address because NetSuite does not allow IPv6 addresses. Also, when you list IP addresses in NetSuite, you’ll need to separate them with either spaces or commas. Let’s take a look at some more tips for entering IP address rules.
Use a Range: First, you can use a hyphen to indicate all the IP addresses within a range. For example, you might enter a range like 192.0.2.1-192.0.2.9. Alternatively, you could further shorten the addresses by inserting the hyphen directly between the differentiating host numbers of the IP addresses. To return to our previous example, your range would now be entered as 192.0.2.1-9.
Use a Subnet Mask: If you are using a subnet mask to define your IP addresses, you can use either a standard shorthand such as 192.0.2.0/24 or the equivalent full subnet mask after the IP address such as 192.0.2.0/255.255.255.0.
All-Inclusive: To include all IP addresses, write “ALL” in the textbox.
All-Exclusive: To exclude all IP addresses, write “NONE” in the textbox.
Creating Unrestricted Roles
Suppose there are specific roles that you want to have unrestricted access to NetSuite. To set that up, you would need to navigate to the Manage Roles page (Setup > Users/Roles > Manage Roles) and select Customize next to the role that you want to have unrestricted access.
On the Role record, you will need to make sure the checkbox Restrict This Role By IP Address is not checked. Then, save the record. An employee who is assigned to this role will be able to access NetSuite through this role regardless of the company’s or even that specific employee’s typical IP address restrictions.
Conclusion
IP Address Rules in NetSuite can help to provide additional security for your account. I trust this blog has been helpful for you! Before you leave, don’t forget to drop your name and email below to join our newsletter. We send out a single email each week with our most recent NetSuite blog, which is a simple way for you to keep growing in your knowledge of all things NetSuite. Joining the SuiteRep newsletter is the best way to ensure you never miss any of our NetSuite posts. See you there!