Administrators who select the ePO 5.10.x rule Always allow logon, which is found on the Logon Protection page, unexpectedly observe that it does not override the Block logon rule.

ePO 5.10.x Logon Protection feature, located on the Server Settings page, allows administrators to set up rules to control access to the ePO console. There are two types of rules:

• Block logon
• Always allow logon.

Despite what the name implies, a rule that Always allows Logon access for a range or single IP address, does not allow access to the ePO console when a Block logon rule also exists. The Block logon rule applies to the endpoint from which the ePO console is being accessed.