Set Up IP Restrictions in CareStack

Let's explore the general administration settings in this guide. You can set up IP restrictions or exclude any restrictions for selected users. The IP restriction feature ensures that a user cannot log in to CareStack unless they are within the allowed IP address listed in the IP restriction. Please ensure you are using a static IP address for the practice. This feature helps prevent users from working from home if that is not permitted. 

Watch this video for a quick walkthrough.

To view the settings:

• Navigate to the System Menu > select Practice Settings > Administration > Security.

• Select the IP Restriction tab > click +Add Restriction.

• Choose whether you want to apply the restriction to User(s) or Location(s).
  • If you choose Locations, all users under those location(s) will have an IP restriction.

• CareStack supports both IPv4 and IPv6 Formats.
  • Click View Supported Formats for additional details.

• If you have chosen the location option, and want to exclude certain users from the IP restriction.
  • Select Users to Exclude, as needed.
• Select Allowed IP Addresses that will have access even with restrictions.
• To Allow Login from Unlisted IPs using OTP, click Enabled. Alternatively, click Disabled to enforce IP-based access.
• Click Add.

Note: Practices may, at times, require flexibility to allow specific users to access CareStack from outside their configured IP range. By enabling the Login from Unlisted IPs using OTP option, such users can verify their identity via a one-time password (OTP) sent to their registered email. Once verified, they can securely log in even when working from alternative or off-site locations.

• The restriction will be displayed on the grid.
• You can Edit or Delete IP Restrictions from the grid as needed.

Note:

• IP Restrictions can be enabled for security reasons, wherein, the users will be allowed to login only from a range of IP addresses as defined here.
• If the user tries to log in outside the allowed range, the login will be restricted.
• It is recommended to have at least one practice user globally excluded from all IP restrictions in order to avoid users from being blocked out of the PMS.

Practices can use this quick guide to learn how to impose IP restrictions for user-level or location-level in CareStack!