IP Allowlisting

NHS Secure Boundary provides a security solution which offers protection against the most sophisticated network security threats for NHS organisations. It is the natural successor to the Health and Social Care Network (HSCN) Advanced Network Monitoring (ANM) service which has protected HSCN internet traffic since go-live of HSCN services in 2017. The contract for the ANM service is coming to an end within the next few months and HSCN Central Network Service Providers (CNSPs) have been asked to connect to NHS Secure Boundary in order to maintain and enhance protection. NHS Secure Boundary is also being delivered to in-scope NHS organisations who have local internet breakouts through internet service providers.

As a result of this change, the public, external IP addresses presented to the internet will change. We are aware that several services and sites accessed over the internet use access control lists (ACLs) or ‘allowlists’ to ensure that only traffic from known IP addresses can connect.

What this means for your organisation

During your organisation’s migration to NHS Secure Boundary the Public IP addresses will change. If your organisation uses HSCN to access the internet your CNSP will be in contact to communicate the new IP addresses, if your organisation is on-boarding to NHS Secure Boundary directly to protect a local internet breakout, the new IP addresses will be communicated to you through your on-boarding project manager. Following this, your organisation will need to take action to notify any services your organisation accesses via the internet to ensure they allow the new IP address range.

NHS related services that may implement allowlisted access

As we progress through on-boarding, NHS related services using IP allowlisting to control access will become known and will be advertised on this support page. Several services outlined below are thought to use allowlisted access, this list will be updated as and when services are identified. If you are aware of any services that allowlist access but do not appear on this list, please email the NHS Secure Boundary team (exeter.helpdesk@nhs.net) with the site/service name so records can be updated.