---
title: "ControlUp Agent Access Control List (ACL)"
slug: "controlup-agent-access-control-list-acl"
updated: 2025-02-02T09:28:45Z
published: 2025-02-02T09:28:45Z
canonical: "support.controlup.com/controlup-agent-access-control-list-acl"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.controlup.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ControlUp Agent Access Control List (ACL)

You can enable tighter control over how the ControlUp Agent communicates with the ControlUp Console and Monitors.

You can read more about [ControlUp Agent Security Best Practices](/tim-reorg/docs/agent-security-best-practices) and different configuration options.

The procedure below prevents other machines from accessing the agent unless their IPs have been added to an Access Control List (ACL) on the agent machines. This IP restriction can be applied on the ControlUp Agent machines to inspect the client IP and cross-reference it with an allowlist configured in the registry.

## Configure the Registry with an ACL Allowlist

The console and monitor IPs to add to this list can be specific (e.g. 10.20.30.40) or listed using CIDR notation (e.g. 10.20.30.40/24). This configuration can be part of a GPO.

**Note**You can create your own GPO or use the attached zip file which contains a template for both this method of authentication and certificate-based authentication described [here](/tim-reorg/docs/certificate-based-agent-authentication).

### Manual distribution of registry key

**To add the registry key manually:**

1. On the agent machine, open the **regedit**
2. Create the key `HKLM/SOFTWARE/Policies/Smart-X/ControlUp/Agent/IPACL`
3. Create a DWORD value named **Enabled** and assign it the value of **1**.
4. Create a Multi-String value (REG_MULTI_SZ) named **A****ddresses**. This key contains the permitted origin addresses of all ControlUp Console and ControlUp Monitor machines that communicate with this agent machine.

[Agent_GPO_files 14112020 (1).zip](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/Agent_GPO_files%2014112020%20(1).zip)