Applying Application Policies to Support Links

Administrators can now control which Application Policies are available when users create Support Links. This allows Support Links to inherit additional access controls, such as restricting access by source IP address, browser, location, or time.

Overview

When Support Links are enabled for an application, a new setting is available:

Allowed Policies for Support Links

Only the selected Application Policies can be attached to Support Links created for this application.

Users who have permission to create Support Links can then select one of these approved policies when generating a Support Link.

Configure Allowed Policies for Support Links

1. Navigate to Applications.
2. Edit an existing application.
3. Enable Support Link.
4. Under the Support Link settings, locate Allowed Policies for Support Links.
5. Select one or more Application Policies that should be available to Support Link creators.

You can also create a new policy directly from this page by clicking Create new policy.

Create an Application Policy

Application Policies can be created and managed from:

Applications → Policies → Add Policy

Application Policies support multiple condition types, including:

• Date and Time
• Location (Country)
• OS
• Source IP
• Browser
• Extension
• Enrolled Device
• Destination Address

These conditions can be combined to create more granular access controls.

Example: Restrict Support Link Access by Source IP

The example below creates a policy that only allows access from two specific IP addresses.

Policy Configuration

Default Action

• Access: Deny

Conditions

• Source IP = 50.2.182.55/32
• OR Source IP = 50.2.181.60/32

Result

• Access: Allow
  

With this policy applied, only users connecting from either of the specified IP addresses will be able to access the Support Link.

Any access attempts from other IP addresses will be denied.

Create a Support Link with a Policy

After an administrator has assigned policies to the application:

1. Navigate to the Application.
   
2. Click Create Support Link.
3. Complete the Support Link configuration.
4. Select a policy from the Policy dropdown.

5. Generate the Support Link.

The selected Application Policy will be enforced whenever the Support Link is accessed.

Example Use Cases

Restrict Access by Browser

Allow access only from approved browsers.

Restrict Access by Location

Limit Support Link usage to users connecting from specific countries or regions.

Restrict Access by Time

Allow Support Link access only during approved support windows.

Permissions

Only users who are authorized to create Support Links can attach policies during Support Link creation.

Administrators determine which policies are available by configuring Allowed Policies for Support Links on the application.

This ensures that Support Link creators can only choose from administrator-approved security policies.