Platform, Security & Integrations / Security

Firewall & IP Allow/Block Lists

A built-in firewall (a security barrier that filters incoming and outgoing network traffic based on rules you define — see Glossary) lets you control exactly which networks can even attempt a connection to your phone system. It works before login credentials come into play at all.

What’s the difference between this and login protection?

Brute-Force Login Protection reacts to repeated failed login attempts. A firewall and IP allow/block list work a step earlier — they can prevent a connection attempt from reaching the login screen at all, by only permitting traffic from networks you trust or explicitly recognize.

Can I restrict access to only our office network?

Yes. You can configure an allow list so that only specific, known networks (like your office’s internet connection) get management access. Everything else is blocked by default. This is a common setup for businesses that don’t need remote admin access from arbitrary locations.

What if we have remote workers who need access from anywhere?

You’re not locked into an all-or-nothing choice. Remote workers can connect securely through the system’s built-in remote access methods (see Remote Access & Work-From-Anywhere), without needing to open your network broadly. You can also add specific trusted networks or countries to an allow list as needed.

Can I block traffic from specific countries or regions?

Yes. You can apply country and region-based restrictions on top of IP allow/block lists. That’s useful for businesses that only operate domestically and have no legitimate reason to accept connections from overseas. See Country & Region Call Restrictions for the calling-specific version of this control.

Does a firewall slow down legitimate calls or logins?

No — filtering happens instantly as traffic arrives, with no noticeable delay for anyone connecting from an allowed network. It only adds friction for traffic that shouldn’t be reaching the system in the first place.