# IP filtering without user authentication/authorization **URL:** \ **Category:** Elastic Security\ **Tags:** elastic-stack-security\ **Created:** [November 15, 2020, 11:02pm UTC](https://discuss.elastic.co/t/ip-filtering-without-user-authentication-authorization/255455 "2020-11-15T23:02:03Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![ahmed\_hachena](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ahmed_hachena/32/79032_2.png) [@ahmed\_hachena](https://discuss.elastic.co/u/ahmed_hachena)\ **Post date:** [November 15, 2020, 11:02pm UTC](https://discuss.elastic.co/t/ip-filtering-without-user-authentication-authorization/255455/1 "2020-11-15T23:02:03Z")
Hi when using IP filtering I'm having a security exception with my requests **missing authentication credentials for REST request**. is it possible to use IP filtering feature without user ? ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [November 16, 2020, 12:44am UTC](https://discuss.elastic.co/t/ip-filtering-without-user-authentication-authorization/255455/2 "2020-11-16T00:44:12Z")
IP Filtering is a feature within Elasticsearch security, and requires you to turn on security. If you wish you can use the anonymous access feature within security to skip the requirement to enter a username & password, but I would strongly discourage it. It is not advisable to rely on IP filters as your only defense against things like ransomware attacks. Elasticsearch's security features like authentication and role based access control can help keep your data safe. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 4, 2022, 8:17am UTC](https://discuss.elastic.co/t/ip-filtering-without-user-authentication-authorization/255455/3 "2022-11-04T08:17:40Z")