General Security Settings

Configure network access controls to secure your AVA implementation.

Where to Find It

Settings → Security → General

Guest & Staff Impact

• Guests: Kiosks are protected from unauthorized access, which reduces service disruptions.
• Staff: Better control over which devices can access AVA, especially during kiosk rollouts or hardware changes.

IP Whitelisting

Restrict access to the Kiosk Check-In interface to specific IP addresses or networks. This prevents unauthorized access from outside your property.

Allowed Formats

AVA supports the following IP address formats:

Format	Example	Description
IPv4 Address	192.168.1.5	Configuring a specific device
CIDR Block	10.0.0.0/24	Whitelisting an entire subnet
IPv4-mapped IPv6	::ffff:192.168.1.5	Supported for dual-stack networks

Managing the Whitelist

1. Add Entry:

   • Enter the IP address or CIDR block
   • (Optional) Add an "Owner" comment to identify the device (e.g., "Lobby Kiosk 1")
   • Click the + button

2. Add Current Device:

   • Click Add Current IP to automatically detect and whitelist the device you are using
   • Useful during initial setup from a kiosk

3. Remove Entry:

   • Click the trash icon next to an entry to revoke access

Best Practices

• Static IPs: Assign static IP addresses to all kiosks and whitelist them individually.
• Dedicated Subnet: If possible, place all kiosks on a dedicated VLAN/subnet and whitelist that range (e.g., 192.168.10.0/24).
• Review Regularly: Periodically audit the whitelist to remove unused entries or decommissioned devices.
• Vouch Access: Ensure Vouch support IPs are whitelisted if remote assistance is required (contact support for the list).