Thank you for your response. I apologize for any confusion. My supervisor wants to prevent analysts from using the Task.init or any other ClearML functions from their personal laptops. Instead, they should only be able to use these functions from a few dedicated machines in the lab.

I managed to limit access using iptables directly instead of ufw, but I've realized that blocking port 8008 also prevents me from using the web interface. Do you have any other suggestions?

Hi @<1690896098534625280:profile|NarrowWoodpecker99> , can you please elaborate on what you mean by limit code access? You define access to the code via the git credentials on the agent config

Hi @<1690896098534625280:profile|NarrowWoodpecker99> , I guess you could do that by limiting access to all ports but the webapp port

I've tried limiting access to port 8008 using UFW on my host machine, but it doesn't seem to work.