IP Whitelisting for confluence only

[Kevin Gérard]

Hi amigos! 

Let's sketch the situation, i have my Jira Cloud products & Confluence on the same site. 

I'm looking into the possibility to share my Confluence with a parent company, without having to opening it up for anonymous access OR having to assign large number of licenses that will increase my bills drastically... 

I was thinking of opening up to Anonymous access BUT add Ip whitelisting. 

I can do this via my Admin portal, but it will apply for my entire site/organization... 
This means my customer portal is also hidden from public... not nice... 

Does anyone know of a way/method to put IP whitelisting ONLY on my Confluence, OR include my Jira, but leave my Servicedesk portal publically available? 

cheers!

[Ste Wright]

Hi @Kevin Gérard 

You should be able to set IP allowlists per product, so a separate allowlist for Confluence and Jira. When setting an IP allowlist, it lets you choose which products to include (you do need to be on either a Premium or Enterprise plan for each product).

This doesn't apply to Jira Software and JSM though as they're both on "Jira" - see this help page for more information:

IP allowlisting gives you an additional level of control, allowing you to specify which IP addresses users must use to access content for Jira Software, Jira Service Management, and Confluence. When you set an allowlist for Jira Software Premium, it applies to customer and agent-facing portals for your Jira Service Management on the same site.

---

There's a few alternatives though:

• Check if data security policies could assist with your need
• Explore if guest access would work (which is free for up to 5 guests per paid user)
• Check out options on the Marketplace, such as External Share for Confluence

Ste

[Nicky Thomas]

It is quite a moronic thing for Atlassian to do by putting such a security feature behind a premium paywall when it offers no other function or cost to Atlassian.

It is one of those things where they care about profit over data security which forces organisations to upgrade to premium, just for this.

It is a bit like going to a petrol station and being told you can't have the petrol unless you buy a new tyre from them, you might not need the tyre and have no use for the tyre, but they make you buy it anyway.