XACT logins can be restricted to configured IP addresses and CIDR ranges with allowed and blocked entries, mirroring the login restriction that already protects Maileon customer accounts. The rules are managed inside XACT, and a lock-out prevention checks that the current session remains allowed when rules change. Use case: Restrict the distributor login to the office network and the VPN range, so a leaked password cannot be used from elsewhere.