diff --git a/src/pages/manage/access-control/posture-checks/index.mdx b/src/pages/manage/access-control/posture-checks/index.mdx index 18c474d6..226c1200 100644 --- a/src/pages/manage/access-control/posture-checks/index.mdx +++ b/src/pages/manage/access-control/posture-checks/index.mdx @@ -117,30 +117,9 @@ If you revisit the `Posture Checks` dashboard, you'll notice a green dot next to Following these steps, you can effectively implement and manage NetBird's Posture Checks, significantly enhancing your network's security posture. -## Known Limitations - -### Peer Network Range Check on Mobile Platforms - -iOS and Android do not allow applications to enumerate the device's local network interfaces, so ranges intended to match a peer's **local NIC IPs** (e.g. an office LAN like `192.168.1.0/24`) cannot be evaluated on those platforms. - -Ranges that target the **public connection IP** still work on mobile, because the management server observes that source IP itself — it does not depend on anything the client reports. So public CIDRs (e.g. `203.0.113.10/32`, `1.0.0.0/24`) and public-IP-based deny/allow rules behave the same on mobile as on desktop. - -**Affected platforms:** -- iOS -- Android - -**Impact:** - -If a policy's Peer Network Range posture check relies on local NIC ranges, the check cannot match on mobile clients and routes gated by that policy may become unavailable on those devices — even when the device is outside the blocked local range. - -**Recommendation:** - -If your deployment includes iOS or Android clients and you need to gate on local network membership, consider one of the following: - -- Create separate policies for mobile clients that do not include local-NIC-based Peer Network Range posture checks -- Use alternative posture checks (such as Geo Location) that are supported on mobile platforms -- Use Peer Network Range checks based on the **public connection IP**, which work on every platform -- Apply local-NIC-based Peer Network Range posture checks only to policies targeting desktop platforms (Windows, macOS, Linux) + + The Peer Network Range posture check on iOS and Android requires NetBird client version [0.70.0](https://github.com/netbirdio/netbird/releases) or newer. On earlier mobile client versions, the check cannot be evaluated due to platform restrictions on accessing local network information. + ## Get started with NetBird