---
schema_version: "1"
id: e989f24e74163dd49c9cf500b5a31bb05a6ea406100a4cae4b0967023d262042
title: Configure an SFTP IP Allowlist
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_pers_sftp_ip_allowlist_config.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_pers_sftp_ip_allowlist_config.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d24862c2a4d50c97116fe903c2086093edff5f4c01e7aa63f9c8e9cdef80cd0a
description: Use SFTP IP allow lists to improve system security. Using allowlists to identify individual IP addresses or ranges of IP addresses that belong to your network, Personalization can prevent bad actors from gaining SFTP access. If you don’t create an allowlist, or your allowlist is empty, Personalization accepts SFTP connections from any IP address.
products:
  - Marketing
  - Salesforce Personalization
release: "264"
---
# Configure an SFTP IP Allowlist

Use SFTP IP allow lists to improve system security. Using allowlists to identify individual IP addresses or ranges of IP addresses that belong to your network, Personalization can prevent bad actors from gaining SFTP access. If you don’t create an allowlist, or your allowlist is empty, Personalization accepts SFTP connections from any IP address.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d73051e38">Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d73051e38 ">To modify the SFTP IP allowlist:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d73051e38 ">Administrator permissions</td>

          </tr>
        </tbody>
      </table>

1. From the main navigation, select **Security** | **Manage SFTP Configuration.**
2. On the SFTP Configuration screen, click the **SFTP IP Allowlist** tab.
3. To add an IP address or range, click **Add IP Range**.
4. Enter an IPv4 or IPv6 range in [CIDR notation](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing#CIDR_notation). For example:
    
    **IPv4 range:** 54.161.29.212/24
    
    **IPv6 range:** 2001:db8:1234::/48
5. Enter a short description for the IP range, such as Office Network.
6. To save the entry, click the check mark.
7. To delete an IP range, click the trash can.