We’re super strict with ip whitelisting—only exact IPs, no ranges. It’s tedious, but we scripted it with Ansible to push updates automatically.
For emergencies, we have a backup OTP auth. No way we’re risking a lockout.
Mobile users? They’re stuck on VPN. Dynamic IPs are a nightmare otherwise.
For emergencies, we have a backup OTP auth. No way we’re risking a lockout.
Mobile users? They’re stuck on VPN. Dynamic IPs are a nightmare otherwise.
