Occupancy tracking works with cloud security proxies, virtual private networks (VPNs), and networks without a fixed IP address, as long as Skedda can identify your office's public IP address. This article explains what Skedda needs from your network and how to configure the most common setups. To learn how occupancy tracking works, see Occupancy tracking.
​
​

Skedda marks a person as seen on-site when their device connects to Skedda from a public IP address listed in Settings → Occupancy tracking. Skedda does not see inside your network. It only sees the public IP address your traffic leaves from, called the egress IP.

Occupancy tracking works when your network meets these three conditions:

Note: If you have more than one office, give each office its own egress IP. Skedda uses the IP address to tell offices apart.

The Skedda Companion and the Skedda web app connect outbound only, using Hypertext Transfer Protocol Secure (HTTPS) on port 443 to *.skedda.com. Occupancy tracking does not require inbound ports or split tunneling.

Find the row that matches your network, then go to its section:

Cloud security proxies, such as Zscaler, Netskope, and Cloudflare One, route your traffic through the provider's data centers. By default, Skedda sees the provider's shared IP address instead of your office's. A shared IP address can change without notice and can also carry traffic from remote employees and other organizations.
​
​Note: Skedda does not integrate directly with these tools. The tools listed are common examples, and the same steps apply to similar products.
​

You can configure your proxy in one of two ways. Choose the option your security policy allows.
​

Most cloud security providers can reserve IP addresses for your organization. To set up a dedicated egress IP:

Use the guidance for your provider:

Note: Dedicated egress IPs are often a paid add-on. Check your contract with your provider.

If your security policy allows it, exclude Skedda from the proxy. Skedda traffic then leaves through your office's own internet connection, and remote employees appear with their home IP address. To exclude Skedda:

Use the guidance for your provider:

Some organizations keep their VPN connected at all times, including on the office network. Occupancy tracking works in this setup if Skedda can tell office traffic apart from remote traffic. To configure it:

If your setup is correct, the Skedda Companion shows Not yet detected on-site today.
​

Important: If office and remote VPN traffic share one public IP address, Skedda marks people working from home as seen on-site. If your VPN cannot separate the two, exclude *.skedda.com from the VPN tunnel. Office devices then reach Skedda through the office connection, and remote devices through their home connection.

If every office connects through one VPN gateway, all offices share one IP address. Skedda can confirm that a person was at an office, but not which one.

Many business internet plans assign a public IP address that changes over time. When it changes, Skedda stops detecting people in the office until you add the new address.

Use one of these options:

If none of these options is available, update the IP addresses in Settings → Occupancy tracking each time your address changes.
​

Some zero trust policies prohibit dedicated egress IPs, proxy exceptions, and static IP addresses for general traffic. Many organizations with these policies still route traffic to specific outside services, such as Skedda, through a dedicated proxy or tunnel with a fixed public IP address. This is the recommended setup for occupancy tracking.

To set up a dedicated proxy or tunnel for Skedda:

A dedicated proxy or tunnel sends only Skedda traffic out through an IP address your organization controls. All other traffic stays under your zero trust policy.

Use the guidance for your setup:

Important: Apply the proxy or tunnel to office devices only, or give remote traffic a separate IP address. If remote devices share the office IP address, Skedda marks people working from home as seen on-site.

Without an office IP address, occupancy reporting and automatic check-in based on network presence are not available. If your main goal is to confirm that people show up for their bookings, use one of these check-in methods instead: