Nebula Portal allowed IP-Addresses

nielsscheldeman

Our Nebula portal is growing and now the question is raising about how secure is this portal. 2FA and strong password is nice, but in other management platforms like RMM, we can limit logging in from certain IP-Addresses. I don't seem to find it in Nebula? Am I overlooking it, or doesn't it exist?

We do pay for MSP Pack, but can't find it.

Zyxel_Tina

Hi @nielsscheldeman,

You are not overlooking it—the feature exists, though it is specifically available for organizations with a Nebula Pro Pack license. You can restrict access to the Nebula portal by following these steps:

1. Navigate to Organization-wide > Organization-wide manage > Organization settings.
2. Scroll down to the Security section to find Login IP ranges.
3. Toggle the setting to ON.
4. Enter the specific Public IP addresses or ranges that are authorized to access this organization.
5. Important: Ensure your current public IP address is included in the list before saving to avoid locking yourself out of the portal.

Once configured, any login attempt from an IP address not on your whitelist will be denied access to that specific organization, providing the additional layer of security you are looking for alongside 2FA.

nielsscheldeman

https://community.zyxel.com/en/discussion/comment/84117#Comment_84117

Hello, will it in the future be available on MSP Pack? It's a bit weird as an MSP that we have to do it per organisation and that our clients are obligated for the pro pack to secure our access.

Zyxel_Tina

Hi @nielsscheldeman,

Regarding your request, we have forwarded it to the relevant team for further evaluation. We've also created an idea post for this feature—feel free to comment on or vote for it to show your support, and we encourage other interested users to do the same.

Additionally, please allow me to clarify the Pro Pack requirement: this feature doesn't obligate your clients to have a Pro Pack license. It's only needed at the organization level where you're managing access. In other words, with a Pro Pack on the Nebula organization, you can configure the "Login IP ranges" setting to restrict Nebula portal access for that organization—your clients remain unaffected and don't need any additional licensing.

nielsscheldeman

https://community.zyxel.com/en/discussion/comment/84125#Comment_84125

Hello, Yes I'm aware that with 1 license per organisation we have enough. But I have 50 organisations. They all started with Access points, not really necessary to restrict access from certain IP's for those devices, but now with the FLEX H series, firewalls must be put in Nebula and they are automatically manageable from Nebula, so security risk is much higher now if 1 gets access into our MSP account.

Zyxel_Melen

Hi @nielsscheldeman

Thanks for sharing. May I know if this only for organization? Or also for MSP portal?

This information will help us to evaluate this idea.