I.Feature Overview

To enhance the security of business email accounts, Tencent Exmail provides the “IP Access Restriction” feature. When enabled, except for the company’s creator logging into the Admin Console, all administrators and members can only log into the mailbox and use clients for email sending/receiving within the predefined IP address or IP range. Additionally, an allowlist can be configured to exempt specific members, departments, or tags from the IP restriction rules, effectively ensuring the login security of the business email accounts.
Note: The “IP Access Restriction” feature is exclusive to the Advanced Email Feature. A company cannot enable this feature until they purchase 5 or more Advanced Email Feature accounts.

II.Process of Setting

1.Go to the Settings page: The company’s creator/super administrator can log in to WeCom, and navigate to [Admin Console -> Collaboration -> Email -> Security and Management -> IP Access Restriction].

2.Add trusted IPs: Click the “Add Trusted IP Address” button and enter the IP address or IP segment that allows login.
Note: IPv6 addresses are not supported.

3.Configure allowlist: After saving the IP settings, you can optionally add allowlist members, departments, tags, or other email accounts to exempt them from the IP login restrictions.
Notes:

• Public mailboxes cannot be added to the allowlist.
• The allowlist only applies to accounts that have been assigned the “Advanced Email Features”.

III.Application Rules

Based on the restriction rules configured by the company, members within the scope of application who are accessing from non-trusted IPs or IP segments will be blocked and prompted with “Login IP not within the allowed range”, as shown in the following tip page:

IV.FAQs

1.Can the trusted IP address be set to the computer’s physical IP?

No, they can not. The IP address cannot be set to the computer’s physical IP or intranet IP. It must be set and added as the Internet IP.

2.To which scenarios does the “IP Access Restriction” feature apply?

(1) WeChat mini program login
(2) WeCom App (desktop and mobile)
(3) Mobile: Browser, QQ Mail App, other third-party mail apps (POP3/IMAP/Exchange protocol)
(4) Desktop: Browser, Foxmail, other mail clients (POP3/IMAP/Exchange protocol)

3.How many trusted IPs can be set?

Companies can add multiple IP addresses or IP segments according to their actual needs, and there is currently no quantity limit.

4.Is the creator subject to IP restrictions?

Logging into the company’s Admin Console: The creator of the company is not subject to IP restrictions by default.
Logging into the personal business email: When the creator of the company logs into their email account, they are also subject to the IP restriction rules.