Skip to main content



How can we help you?


Druva Documentation

How to perform restore over VPN with GeoFencing enabled?

Heads up!

We've transitioned to a new documentation portal to serve you better. Access the latest content by clicking here.


This article applies to inSync Cloud.


GeoFencing is an IP-based network filtering mechanism, in which only a specified IP address or a  range of IP addresses is allowed to pass through.  This IP address or the range of IP addresses is termed as scope. Connections outside the scope are blocked.

inSync Restore operation honors GeoFencing. This implies that you can perform a restore only when the request comes from the IP address present in the GeoFencing scope.

It is possible that the inSync user on Public Network, connected through VPN, may face issues when performing the restore even after connecting to the VPN.

The issue occurs mostly because the public IP address of the user's system is out of the GeoFencing scope. Most corporate VPNs use split tunneling due to which the public IP of the inSync user stays the same as provided by the internet service provider.

Verify IP address

You can verify the IP address in question by following steps.

  1. Note the IP address of the inSync user's device using the following website: 
  2. Connect to the user's device through VPN but from outside the corporate network. 
  3. Again, note the IP address of the user's device using the following website : 
  4. Check whether both the IP addresses are same.
  5. If the IP addresses are different, check whether the address obtained through VPN is included within the scope of the Public gateway IPs of GeoFencing on the inSync Management Console.  

Allow restore over public IP 

To allow restore over public IP, add the public IP within the scope of the public gateway using the following procedure to ensure the restore request from the public IP is allowed.

  1. Log on to inSync Management Console..
  2. On the menu bar, click SettingsMenu1.png > Settings.
  3. On the Settings page, open the Network tab.

  4. Under Geofencing, click Edit.
  5. On the Edit Settings window, enter the public IP address in the Public Gateway IPs box.

  6. Click OK to save the IP.