Public link access only from internal network

[Jan Velebny]

We would like to allow "Public links" for our colleagues (without access to Confluence) as "ready only"  and only with our company domain. 

Can this policy be set up somehow?

Thank you

Jan

[Kristian Klima]

Hello @Jan Velebny 

To allow your company users without Confluence seats to access confluence content, you can use one of the follownig apps.

• Scroll Viewport by K15t
• Instant Websites by Glintech

(To my best knowledge, only those two apps can help)

The app

a) creates a static website from you Confluence content

b) allows you to control access to that website with your SSO scheme.

At Emplifi, we're using Scroll Viewport to create a static website with the Internal version of the documentation and controll access with our SSO. You can determine who from your employees has access to such a site - all, specific roles, etc. 

[Marc - Devoteam]

HI @Jan Velebny 

No this is not possible, a created public link can be viewed by anyone on the internet if they have the link and as long as the link is active.

The content is always view only.

See, how-secure-are-public-links 

[Marc - Devoteam]

Hi @Jan Velebny as @Thiago P _Atlassian Support_ 

mentions,

Whitelisting can be an option, but it can be cumbersome if people need or want to access the pages outside the office.

[Thiago P _Atlassian Support_]

Hey there @Jan Velebny ,

As @Marc - Devoteam mentioned, Public Links are available to the whole Internet as long as they have the direct URL to the page (which is not indexed by search engines such as Google).

However, using Public Links in combination with IP Allowlist policies should work for you as access can be restricted to your Site for a specific list of IPs (or IP ranges using CIDR notation) used by your Company. Usually offices and VPNs have predefined outbound proxies that can be used for this.

Make sure to check our documentation: https://support.atlassian.com/security-and-access-policies/docs/specify-ip-addresses-for-product-access/

A few worthy notes:

• this feature is available in the Premium and Enterprise plans
• your company is responsible for coming up with a list of IPs and maintaining it

We have seen a number of Customers implement this strategy, either with Public Links or Anonymous Access.

Hope this helps!  =]