By default, search engine instances deny all external access. To restrict access, go to the KandaSearch management console, select the target search engine instance, choose the settings menu on the left side, and then add allowed IP address ranges in CIDR format under "Allowed IP Ranges" on the displayed screen.
