Restricting access to Zendesk Support and your Help Center using IP restrictions

Fastpath: Admin Center > Account > Security > Advanced

You can restrict access to Zendesk Support to users within a specific range of IP addresses. This means that users from these IP addresses are the only users allowed to sign in to Support. You can also allow customers (but not agents and administrators) to bypass IP restrictions. IP restrictions apply to Zendesk and Zendesk mobile applications.

You can specify ranges of IP addresses, separating each range with a space. Two methods are available to specify a range. The first is to use asterisk (*) wildcards. An IP address consists of four numbers separated by periods, such as 192.168.0.1. You can substitute a single asterisk character (*) for any number group to let Zendesk know that it should accept any value in that space. For example, 192.*.*.* allows any IP address whose first number is 192.

The second way to specify an IP range is to use IP subnet mask syntax. For example, 192.168.1.0/25 specifies all the IP addresses between 192.168.1.0 and 192.168.1.127.

You cannot specify IP ranges where the CIDR (Classless Inter-Domain Routing) value is 0. For example if you specify, 10.0.0.0/0, the /0 is not valid.

To set IP restrictions

1. In Admin Center, click Account in the sidebar, then select Security > Advanced.
2. On the IP Restrictions tab, select Enable IP restrictions, then enter the Allowed IP Ranges you want to restrict.
   Note: Enabling IP based access restrictions can break third party integrations. Be sure to include all external IPs that need access to your account via the Zendesk API.
3. (Optional) Select the Allow customers to bypass IP restrictions check box.

   This option ensures that you customers can access Support regardless of what their IP address is, even if their IP address is not in the range of allowed IP addresses.

   Agents and administrators cannot bypass IP address restrictions.

4. Click Save.