Restricting View Permissions by Workstation IP / Security Zones

Ignition
1

Hi everyone, I need some help with an Ignition Perspective architecture question.

We have users with multiple roles logging into different physical workstations. We want to restrict view permissions based on the workstation's IP address so they only see localized controls.

We tried using Gateway Security Zones mapped to our IP ranges, but the sessions aren't picking up the zones correctly (the SecurityZones session property remains empty). If anyone has configured this successfully or knows the exact expression workaround to enforce strict Role + Zone security, please let me know!

image
image789×733 62.5 KB

image
image1185×535 18.1 KB

image
image315×517 12.6 KB

2

Are your clients reaching your gateway through a NAT? If so, the gateway can only see the IP of the NAT router, not the real client IP, for security zone determinations.

3

Hi,
No, we are using a direct connection. Both client and gateway are connected to the same switch.

4

Consider putting one or more labels on a shared docked view to display all of the security-relevant session properties. For you to inspect in actual client sessions (designer substitutes auth--not the same).