Restrict CMS access by IP address
In SF 3.x, we could restrict access to the CMS features of Sitefinity by using IIS IP restrictions on the /Sitefinity/Admin folder. It's not obvious how we can accomplish the same thing in Sitefinity 4.
Is this possible in SF4? If so, how? Is it still using IIS facilities? I've searched the various online resources and the documentation, without luck.
Thanks,
Donnie
Hi Donnie,
You should put /Sitefinity in the deny rule. In Sitefinity 4.0 there are no templates exposed in the solution and all files are embedded. You could exclude the Services folder form your rule, since it is used by some of the pubic controls.
Greetings,
Ivan Dimitrov
the Telerik team
Suppose I do that - add a "deny" rule to the /Sitefinity folder. What would a user see if he manually tried to go to www.mydomain.com/Sitefinity/Pages page (for example)?
And do you mean exclude the Services folder (which is under /Sitefinity) from the "deny" rule (thereby "allow"ing access to that folder)?
Thanks for the prompt response,
Donnie
Hello Donnie ,
The user will see a screen telling that the location is restricted by IP and it is not accessible. The services folder should not be included under the restriction if this website will be accessed from some public users.
Best wishes,
Ivan Dimitrov
the Telerik team