# Check Allowed Country/Region IP

The **Allowed Country IPs** list is a geographic access control (sometimes called geofencing) for your Cloud Voice system. It decides which countries and regions are permitted to reach the system over the internet, based on where each connection's IP address originates. (IP stands for Internet Protocol, the numeric address every device uses on a network.) Out of the box the list shows every country and region in ascending alphabetical order (A to Z) and mixes allowed and blocked locations together. Because the two are interleaved, it is hard to tell at a glance which locations you have actually permitted. Re-sorting the list pulls the allowed locations together at the top so you can review them quickly.

:::note
Sorting only changes the order in which the list is displayed. It does not allow or block any location, and it does not change your security settings, so you can re-sort as often as you like with no effect on live traffic.
:::

## Procedure

1. Sign in to the phone system web portal and open **Security > Security Settings > Allowed Country IPs**.
2. Next to **Operations**, click the reorder icon ![Reorder icon](/images/pbx/down-rearrange-order.png).

![Allowed country and region list with the reorder control next to the Operations column](/images/pbx/allowed-country-ip-operations-ce.png)

:::tip
Run this sort before you edit the allowed list. Seeing every permitted location in one place makes it easy to spot a country that should not be there, or one that is missing.
:::

## Result

The list refreshes and every country and region that is allowed to reach the phone system is collected at the top, so the permitted locations are easy to scan.

![Country and region list re-sorted so allowed locations appear first](/images/pbx/check-allowed-country-ip-ce.png)

:::caution
Any country or region that is not in the allowed set is blocked from connecting. If a remote worker, a SIP trunk, or the Cloud Voice App tries to connect from a location you have not permitted, its registration and calls will fail. Confirm that every location your users and devices connect from appears in the allowed list.
:::