How to manage dynamic IP's in IP allowlist for Premium plan

[MahanthPrudhvi]

We are actually using  jira software standard plan but planning to move to Premium plan for better security and to have IP allow list feature to restrict jira usage to certain places/areas only , but the problem is some of our employees who are sometimes working from home  will have dynamic IP's which keeps changing so how do we achieve this problem

[Harald Seyr · Accepted solution]

Hi @MahanthPrudhvi 

this feature is requested by others also, but as I can judge, the current version of Atlassian Cloud does not support whitelisting of dynamic IPs and/or domains. You can support the feature requests at

• [BCLOUD-17570] Allow users to whitelist domains instead of just static IP addresses. - Create and track feature requests for Atlassian products.
• [JRACLOUD-78357] Jira Cloud - Update IP Whitelist Dynamically - Create and track feature requests for Atlassian products.

As a workaround (maybe this does increase overall security level also), you could check if your remote workers can use a VPN to connect to your companies main site and then uplink to atlassian from there, so atlassian sees the static IP from your main site network uplink.

Regards,

Harald

[MahanthPrudhvi]

Hi @Harald Seyr 

Thanks for the reply, here we cant provide remote to every user, so is there any other option to achieve the above feature as we want to improve our security standards by upgrading to Premium plan.

[Harald Seyr]

Hi,

since I am no security expert or consultant, I suggest you check if you find some trustworthy company or expert that suggests a security service that matches your requirements.

Personally, if there is no option for every remote user to connect to your main site and then hop from there to atlassian, I would check if some of the "zero trust" providers solves this. You can ask google search for "zero trust vpn" and find companies that provide a VPN independend from a central company site, this would probably lead to situation where your remote workers connect to e.g. ZScaler (I am in no way connected to this company, I just know a little about their service) and then continue to Atlassian with static IPs from ZScaler. Using such a service would also allow you to control the network traffic of the remote users in a secure way, e.g. forcing web proxy or blocking downloads.

Regards,

Harald