Privacy & Security → Network Firewall on a district team controls traffic from a logged-in person calling Edlink through an integration (the User API, including widgets). It does not apply to Graph or rostering calls made with an application or integration access token, and it does not apply to the SSO login pages themselves.
Changes take effect immediately. Person-token calls can come from home networks and cellular data, so listing every legitimate IP is usually impractical.
For the controls, CIDR format, and recommended settings, see Network Firewall.