---
title: Access Control Lists: Portal ACLs
slug: epmm/system-manager-guide/access-control-lists-portal-acls
createdAt: 2026-10-06T07:58:36.424Z
---

Use the <font color="#323232">Security &gt; Access Control Lists &gt; Portal ACLs</font>options to further restrict access to various portals within Ivanti EPMM.

This section includes the following topics:

- [Enabling an ACL Portal](docId\:M-ACyzVqVQtR_cbzTE5aJ)
- [Portal ACLs window](docId\:M-ACyzVqVQtR_cbzTE5aJ)

## Enabling an ACL Portal

**Procedure&#xA0;**

1. Log in to System Manager.
2. Go to <font color="#323232">**Security** &gt; **Access Control Lists** &gt; **Portal ACLs**</font>.
3. Select the portal you want to enable.
   Refer to [Portal ACLs window](docId\:M-ACyzVqVQtR_cbzTE5aJ) for details.
4. Enter the IP address or network/mask pair to specify servers or networks that may access this component. Separate the entries with spaces.
   **Examples**:
   - 100.0.0.0 150.0.0.0
   - 101.0.0.0 10.0.0.0/255.255.255.0

:::Paragraph{indent="1"}
**You must use the expanded form of the mask. Do not** specify an entry similar to 10.0.0.0/24.
If your Ivanti EPMM is behind a NAT, enter the IP of the NAT network.
Remember that the Sentry must be able to access Ivanti EPMM. If it does not have access, then the ActiveSync Devices page will not display devices.
:::

5. Click **Apply > OK.**

## Portal ACLs window

The following table summarizes fields and descriptions in the **Portal ACLs&#x20;**&#x77;indow:

Table: Portal ACLs Fields

| Fields                    | Description                                                                                                                                                                                                                                                                                                                                                                                           |
| ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| User Portal               | Enables device users to register their devices, view device information, and manage their devices.                                                                                                                                                                                                                                                                                                    |
| Admin Portal              | The Admin Portal.                                                                                                                                                                                                                                                                                                                                                                                     |
| System Manager Portal     | The System Manager.                                                                                                                                                                                                                                                                                                                                                                                   |
| Sentry Connection         | The Sentry installed for ActiveSync access control.                                                                                                                                                                                                                                                                                                                                                   |
| API Connection            | The Web Services API.                                                                                                                                                                                                                                                                                                                                                                                 |
| iOS MDM                   | The iOS MDM service for profile management.                                                                                                                                                                                                                                                                                                                                                           |
| iOS iReg URL              | The iReg service that enables provisioning iOS devices without installing the MI Go app.                                                                                                                                                                                                                                                                                                              |
| OAuth API                 | Enables or disables the OAuth API. You can control access to the OAuth API by defining IP addresses, ranges of IP addresses and subnets based on the values they enter into the field. Addresses can be internal (non-routable) or external (routable). With this control, you can limit access to OAuth API from routable IP addresses or restrict access to specific machines for security reasons. |
| App Storefront Connection | The app management service for iOS.                                                                                                                                                                                                                                                                                                                                                                   |