How do I block IP addresses / countries for SAML integrations?

When defining a policy, you can specify a single IP address or a range of IP addresses to apply globally.

When creating a policy to block a large range of IP addresses, it might be advantageous to explore the reason that so many exclusions are being made.

Creating a policy to block a country, rather than a ranges of IP address, might better suit your needs. For more details refer to How to I block IP addresses by country?

**Blocking a country will block the entire country, no exceptions allowed.

NOTE: This policy will apply globally to all users/customers within your Evo Environment. This policy is specific for SAML Webapps.(Does not apply to Evo Credential Provider).

How to apply the rule globally

1. From the dashboard, click Policies.
2. Click the Add New Policy button.
3. Click Block IP Addresses - Custom.
4. Enter the single public IP Address or the range of public IP Addresses you’d like to block. When entering an IP address range, it must be entered as X.X.X.X - X.X.X.X.
5. Click Apply. If after applying the IP addresses to the rule, you’ve found one that is incorrect or shouldn’t have been included. You can remove the address in question.
   
   1. To remove: Click the trash can next to the IP address.
6. Repeat steps 6 & 7 for each IP address or range to be included in the rule.
7. Once all IP address have been added and confirmed as correct, click Add Rule.

Country Based Policy

When defining a Country based policy, you can select a single country/territory, or multiple countries/territories to block.

Blocking a country/territory will block the entire region, no exceptions allowed.

NOTE: This policy will apply globally to all users/customers within your Evo Environment. This policy is specific for SAML Webapps.(Does not apply to Evo Credential Provider).

For more details on how to block specific IP addresses or a range of IP’s, refer to How to I block IP addresses?

How to apply the rule globally
From the dashboard, click Policies.
Click the Add New Policy.
Click Block IP Addresses – By Country.
From the list of countries check the box to the left for each country to be blocked. To locate a specific country, use the search field to narrow down the list.
Once all countries have been checked, click Add Rule.