Removing an IP Block

To remove an IP block, you unblock it. Unblock can be a one-off (delete the row) or batched (remove all blocks matching a filter).

One-Off Unblock

1. Open Architect Panel → Blocked IP Addresses.
2. Find the IP (search or filter).
3. Click Unblock on the row.
4. Confirm in the dialog. The block is lifted immediately and a note is added to the audit log with your name as the actor.

Batch Unblock

To clear out a range of blocks (e.g. all auto-bans older than 48 hours):

1. Filter the list by reason or date.
2. Select multiple rows.
3. Click Bulk action → Unblock all selected.

Examples of When to Unblock

• Customer call: They report being locked out. After verifying their identity, unblock their office IP.
• False positive cleanup: Tighten thresholds and unblock IPs caught by the old, looser policy.
• Pen-test cleanup: After a security test, unblock the test team's source IPs.
• Routine purge: Monthly job to clear expired blocks that haven't been hit in 30+ days.

Tip: Don't auto-purge blocks too aggressively — keeping a record of past blocks helps spot returning bad actors. Mark blocks as “expired” rather than deleting them outright when feasible.