Skip to main content
日本語 简体中文 繁體中文

Effect on HENNGE One of Changes to Your Organization's IP Addresses

Question

When adding or changing the Source IP used by your organization, will there be any effect on HENNGE One services or any tasks that need to be performed?

Answer

The services affected by adding or changing Source IP addresses and the corresponding measures are as follows.

If you use Source IP-based access control or access passes in Access Control (including Secure Browser and Device Certificate), or if you use Source IP control Settings in the Email Archive service, you will need to change the Settings.
Please refer to the following for details.
*Since other HENNGE One services may also use Access Control authentication, be sure to change the Access Control Settings.

Access Control +

If access control by Source IP is configured, you will need to add or delete allowed Source IPs.
※ This also includes Secure Browser and Device Certificate.
In addition, if a Source IP is specified in the access pass issuance Filter Conditions, changes are also required.
Refer to the following Procedure to make the changes.

When changing the Source IP specified in an access policy group

  1. Log in to the Access Control administration screen.

  2. Click ［Access Settings］－［Access Policy Groups］ in the left menu.

    Access Control管理者画面の左メニューからアクセスポリシーグループを選択する画面

  3. Click the access policy group that you want to edit.

    編集するアクセスポリシーグループを選択する画面

  4. For the following fields in the ［Service Access Settings］ section according to your environment, select the Target access policy template from the drop-down list and click the Edit button.
    ※ If the same access policy template is used for ［Conditions for Allowing Access］／［Conditions for Allowing Legacy Authentication］／［Conditions for Not Requiring OTP］, modifying any one value will apply the changes to all Filter Conditions.

    アクセスポリシーグループの編集画面

  5. The access policy template Edit screen is displayed. Modify the Source IP in ［Conditions for Allowing Access］.
    ※ The format for adding a Source IP is "or ip4:xxx.xxx.xxx.xxx".
    ※ You can also specify a range in CIDR notation (ip4:xxx.xxx.xxx.xxx/xx).
    For details, also refer to the following article.
    ［Access Control］How to Write Access Condition Expressions

    • When the current value is "ip4:yyy.yyy.yyy.yyy or ip4:xxx.xxx.xxx.xxx or hsb:true"
      • When adding zzz.zzz.zzz.zzz
        ip4:yyy.yyy.yyy.yyy or ip4:xxx.xxx.xxx.xxx or ip4:zzz.zzz.zzz.zzz or hsb:true
      • When deleting xxx.xxx.xxx.xxx and adding zzz.zzz.zzz.zzz
        ip4:yyy.yyy.yyy.yyy or ip4: zzz.zzz.zzz.zzz or hsb:true
    • When the current value is "@xxxx@"
      An IP set is configured.
      Add a Source IP to the configured IP set (xxxx) by referring to the following article.
      [Access Control] Create / Edit IP Sets

    アクセスポリシーテンプレートの編集画面

  6. Click ［Apply Changes］.

When changing the Source IP specified in the access pass issuance Filter Conditions

To change the Source IP used in the access pass issuance Filter Conditions, modify it using the following Procedure.

  1. Log in to the Access Control administration screen.

  2. Click ［System］－［Domain Settings］ in the left menu.

    Access Control管理者画面の左メニューからドメイン設定を選択する画面

  3. Click the ［Others］ tab.

    ドメイン設定のその他のタブを選択する画面

  4. From the drop-down list for ［Access Pass Issuance Conditions］ in the ［Access Pass (Cookie)］ section, select the Target access policy template and click the Edit button.

    入場証発行条件のアクセスポリシーテンプレートを選択する画面

  5. The access policy template Edit screen is displayed. Modify the Source IP in ［Conditions for Allowing Access］.
    ※ The Source IP format is "or ip4:xxx.xxx.xxx.xxx" or "or ip4:xxx.xxx.xxx.xxx/xx" (CIDR notation).
    Reference: ［Access Control］How to Write Access Condition Expressions

    • When the current value is "ip4:yyy.yyy.yyy.yyy or ip4:xxx.xxx.xxx.xxx or hsb:true"
      • When adding zzz.zzz.zzz.zzz
        ip4:yyy.yyy.yyy.yyy or ip4:xxx.xxx.xxx.xxx or ip4:zzz.zzz.zzz.zzz or hsb:true
      • When deleting xxx.xxx.xxx.xxx and adding zzz.zzz.zzz.zzz
        ip4:yyy.yyy.yyy.yyy or ip4: zzz.zzz.zzz.zzz or hsb:true
    • When the current value is "@xxxx@"
      An IP set is configured.
      Add a Source IP to the configured IP set (xxxx) by referring to the following article.
      [Access Control] Create / Edit IP Sets

    アクセスポリシーテンプレートの編集画面

  6. Click ［Apply Changes］.

Email Archive +

Email Archive can perform Source IP-based access control independently of Access Control.
If you are using Source IP control Settings, you must add or delete Source IPs.

* Due to the nature of the service that stores incoming and outgoing emails in your environment, HENNGE cannot access Email Archive in your environment.
Please have an administrator modify the settings.

Procedure for Changes

Please refer to the following articles.
[Email Archive Modern] How to Configure Allowed IP Addresses for Accessing the Administration
[Email Archive Modern] How to Set the Time Zone
* Source IPs can be added in the format "xxx.xxx.xxx.xxx" or specified as a range using CIDR notation (xxx.xxx.xxx.xxx/xx).
* Email Archive supports both IPv4 and IPv6.

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.