Ix 9.1.0 SUP-586

enforcing IP restriction on KS