# IP Whitelisting/Network

By default, any external access to your Snowflake account is prohibited. You are required to setup IP policies to ensure access is only granted to addresses you trust. 

First you'll need setup a network rule specific to a trusted location, and then assign that location's IP addresses to it, before finally enabling the rule on your account. You can assign your trusted IP addresses before enabling the rule on your account. Whilst you can add all IP addresses to one rule, it is recommended to use multiple rules to separate concerns. You can do this by creating a 'New Network Rule'. 

For example, you may choose to have one rule for your corporate network, and another rule for home office users. This can make management of your rules easier.

For advanced users, it is possible to configure IP address ranges by providing the appropriate CIDR range when configuring the IP addresses against each rule. Depending on your network this may make it easier to maintain your account configuration.

### Step 1: Creating a new Network Rule: 

* Select 'New Network Rule' from the left-hand navigation: 

<figure><img src="/files/FUtDy9ABG6sYxfECCfwD" alt=""><figcaption></figcaption></figure>

* Enter a 'Network Rule Name' (The rule name must start with a letter, contain only letters and numbers with no spaces)&#x20;

For this step, you can keep the rule disabled as, it can be enabled at a late stage.&#x20;

* Click 'Create'&#x20;

### Step 2 - Adding an IP Address:&#x20;

* Using the the menu icon (three dotted lines) on the selected rule, expand the options and select 'Create Whitelisted IP'.&#x20;

**Note:** If Reapit have previously configured your network policy, you will see an existing network rule 'Customer\_Ingress\_Rule' which you can use:&#x20;

<figure><img src="/files/GxiFNM2G5bA961jlJtO8" alt=""><figcaption></figcaption></figure>

* Enter a single IP Address in the correct format (dotted decimal notation e.g. 111.111.111.111):&#x20;

<figure><img src="/files/NGrq83FV6NzkgP3fsZ72" alt=""><figcaption></figcaption></figure>

* By default the 'CIDR Suffix' will be set to '32' as it is the most commonly used range. If you are provided a different CIDR this can be amended. If you are unsure, please reach out to your IT Network provider to confirm.&#x20;

### Step 3: Enabling a Network Rule:&#x20;

* To enable a Network Rule, expand the options on the selected rule and click 'Enable Rule':

<figure><img src="/files/SHlhvF3WXTvZyso7MF51" alt=""><figcaption></figcaption></figure>

## FAQ

### I use Power BI Hosted, how do I add their IP's to my policy?&#x20;

On the left-hand navigation, you'll see an option to select 'I Use Power BI':

<figure><img src="/files/PRfdWAh9ND1xSZj6U6xH" alt=""><figcaption></figcaption></figure>

This will present the following modal:&#x20;

<figure><img src="/files/rEq1VH9wogWNPwpCK5lX" alt=""><figcaption></figcaption></figure>

* Clicking on 'Open Mail Client' will populate an email for you to send to our Data Warehouse team, who will apply the Power BI public IP addresses to your policy.&#x20;

**Note:** As Power BI hosted IP addresses are subject to can change, this will need to be done at a server level rather than through the Data Warehouse App (you will not see an associated network rule to reflect this). As and when they change, we will automatically update your policy so you only need to make the request once.&#x20;

### How does it work if I don't have a static IP address?&#x20;

IP Whitelisting is a requirement for accessing Snowflake. If your IP address is subject to change (e.g. different working locations or not static), you will need to add each IP address to your policy to obtain access.&#x20;

### How do I delete an IP Address from a Network Rule?&#x20;

To delete an IP Address, simply expand the options on the network rule and select the 'bin' icon.&#x20;

### How do I delete a Network Rule?&#x20;

This feature is not currently available.&#x20;


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://datawarehouse-foundations.reapit.cloud/ip-whitelisting-network.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.