When setting up RM Unify multi-factor authentication (MFA), you are able to configure a set of trusted IPv4 address range(s) for your establishment so that users will not be prompted for MFA when using a device assigned a trusted IP address. 

This will allow you to exclude your school's IP range if you would only like users to be prompted for MFA when they are outside of this range. It can be helpful for schools that operate a 'no mobile phones' policy, as this will remove the requirement to complete the MFA prompt on a user's personal device while at school. Since the majority of malicious attacks on user accounts are more likely to occur from outside of the school location, this feature will allow schools to make a compromise between security and user experience.

1. If you are an RM Connectivity customer and RM provides your broadband, please follow the steps in the RM Connectivity Customers section below.
2. Sign in to RM Unify as a super admin user.
3. Navigate to the RM Unify Management Console.
4. On the left-hand side, under 'Sign In & Security', select Trusted IP Addresses.
5. Type the CIDR* of the trusted IPv4 range. For example, a CIDR of 21.19.35.32/28 will set the IPs 21.19.35.32 - 21.19.35.46 with subnet mask 255.255.255.240 as trusted IPs.
6. Click Add.

*Classless Inter-Domain Routing is a method for allocating IP addresses and for IP routing.

1. Log a support request and we will provide the trusted IP addresses to add.
2. Follow the steps in the Procedure above to add the IP addresses we provide.
3. On each device with a browser configured to use any proxy server, add *.rmunify.com as a proxy server exception. Please contact your network support team for assistance with rolling this out, as they may deliver the setting automatically as part of a Group Policy Object. 

Notes:

• It is not necessary to add *.rmunify.com as a proxy exception when the browser is not configured with a proxy server, e.g. if you are using transparent filtering.
• If you are using an additional product such as Smoothwall and browsers are configured with the Smoothwall server as the proxy server, please add the *.rmunify.com exception to the device's browser.

• If the user is accessing the app from an IP in the trusted IP range, they will not get prompted to set up MFA and will be able to access the app.
• If the user is accessing the app from an IP that is not in the trusted IP range, they will get prompted to set up MFA.

• https://www.ipaddressguide.com/cidr
• https://mxtoolbox.com/subnetcalculator.aspx