Skip to main content
Feedback

Overview of IP Blocking Policy

Updated 3 July 2026

The IP Blocking policy provides the ability to block API requests according to the configured Subnet, IP list or IP range.

  • Supports IPs in the following formats:

    • CIDR (for example - a.b.c.d/x)

    • List of IPs

    • IP range

  • Fetches the denylisted IP from pre-input to authenticate the requesting IP.

  • If denylisted IPs are configured in pre-inputs then the policy blocks only those requests where the IPs match the configured denylisted IPs.

  • The configured IP (IPv4) addresses are entered in CIDR notation or comma delimited.

  • Supports only pre-processing of API request.

  • Supports IP denylisting of resource endpoint only configured in API Management.

    • Denylisting by IP address for customer backend servers behind API Management.

    • API Management token endpoints are not denylisted by IP address.

On this Page