Improving UX for group-level IP Filtering

Proposal

Problem

If the Group IP filtering field is empty, it means that all traffic is allowed (same as having entered 0.0.0.0/0 in the Group IP filtering field). This means that a Global allowlist is of no effect since those IPs are allowed anyway.

However, when you enter an CIDR in the Group IP filtering field the Global allowlist gets into affect AND allow those CIDRs in the allowlist in addition to the one(s) you enter in the Group IP filtering field.

Thus in order to block all traffic except what's in the Global allowlist you must enter some of the IP(s) from the Global allowlist in the Group IP filtering field as well, since that is the only way to "switch on" the IP filtering on group level.

Idea

Having a checkbox when creating a group that can be checked and if it is un-checked it means that all traffic is allowed (as today). If it is checked it means that only the Global allowlist is allowed + any IP:s entered in the Group IP filtering field.

--> More intuitive

--> Better UX

This checkbox feature could also be set from Admin to default to be checked (or unchecked if you want), and could even be enforced from admin to be checked and the users are not allowed to uncheck it, meaning that the IP filtering is always in affect.