Best Practices for IP Whitelisting – How Do You Manage It? or IP Whitelisting: How Strict Should Your

I’m in the “chill” camp. We whitelist /24 subnets for offices but require MFA for anything sensitive.

For tools, Check Point’s SmartConsole works great for us. And we log everything in Splunk for audits.

Mobile users? They get a temporary IP whitelist if they’re on LTE. Pain, but it works.