IP whitelisting for direct access