Prevent users from unauthorized IP addresses from accessing your Marketing Cloud Engagement accounts.
When you enable the Login IP Allowlist, you specify the IP address ranges that belong to your network. Marketing Cloud Engagement also recommends IP ranges based on previous logins, which you can quickly add to your allowlist. If someone attempts to log in from an IP address that isn’t on the allowlist, Marketing Cloud Engagement logs the access attempt and denies the login. The login IP allowlist is turned off by default.
When the login IP allowlist is turned on, it applies to logins on the Marketing Cloud Engagement web interface and through the API. You can configure separate IP ranges for UI and API access, and you can define those ranges at the business unit or Enterprise level. For ranges defined at the Enterprise level, each business unit inherits the parent settings.
The Access Log contains a list of IP addresses and login names that logged into or attempted to log into your network.
- Enable and Configure the Login IP Allowlist
Configure the behavior of the login IP allowlist in your Marketing Cloud Engagement account. - Add IP Addresses to the Login IP Allowlist
Add IP addresses and ranges to the login IP allowlist for Marketing Cloud Engagement. - Add Recommended IP Ranges to the Login Allowlist
Review recommended IP address ranges and quickly add them to your login IP allowlist. Marketing Cloud Engagement tracks the IP addresses of users who log in to your org, and then suggests trusted IP ranges for your allowlist. Instead of entering IP ranges by hand, you review the suggested ranges and add the ones you trust to your allowlist. - Using the Login IP Allowlist with Broad or Dynamic IP Ranges
For the login IP allowlist to be effective, traffic that accesses your Marketing Cloud Engagement account must come from a stable IP range. If your organization uses the public cloud, dynamic infrastructure, or distributed networks, or if you have many remote employees, your users can access Marketing Cloud Engagement from a diverse range of IP addresses. In these situations, establish a stable egress path for your users before you turn on the login IP allowlist in blocking mode. - Edit an IP Range
Change an IP address or range for the IP allowlist. - Define IP Allowlist Source for Enterprise 2.0 Accounts
Choose how the IP allowlist applies to business units in Enterprise 2.0 accounts. You can choose to let each business unit specify the IP ranges for the allowlist separately, or you can configure all business units to inherit the settings from the parent account. - View the Access Log
See a list of attempts to log in to your Marketing Cloud Engagement account from IP ranges that are outside the ones specified by your IP allowlist.