---
schema_version: "1"
id: 5330cbdcc521be97dd434b25705784fc2ea32283ca52c18fc489e6de79321b63
title: Network Access Restrictions in B2C Commerce
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_network_access_restrictions.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_network_access_restrictions.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 98ad1e40719a0f72d6ef27a8d9b543b36057ee6424d69cef2f66a94e1a971b36
description: "The network level is the first line of defense against attackers trying to access your assets. Salesforce B2C Commerce uses two mechanisms: one for storefronts and one for Business Manager."
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Network Access Restrictions in B2C Commerce

The network level is the first line of defense against attackers trying to access your assets. Salesforce B2C Commerce uses two mechanisms: one for storefronts and one for Business Manager.

- **[Storefront Network Access in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_storefront_network_access.htm&release=264.0.0&type=5)**  
    To limit network access to a storefront, configure the embedded Content Delivery Network (eCDN) that comes with B2C Commerce. eCDN is self-service in Business Manager.
- **[Business Manager Network Access in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_business_manager_network_access.htm&release=264.0.0&type=5)**  
    To limit network access to Business Manager, configure security controls to restrict access to specific IP addresses or ranges. The intent of setting these network access restrictions is to lock out attackers who obtained valid credentials through illegitimate means. To enable this functionality, you can specify a range of allowlisted IP addresses allowed to access Business Manager and a range of blocklisted IP addresses not allowed to access Business Manager. If an IP address is blocklisted and allowlisted, it’s denied access.