In ESS IP restrictions can be used. This is to limit the actions of the operation to only work if it comes from an approved IP Address (Location).
From the System Setup menu item find “ESS Profiles” if you do not see this option you will need to call tech support at 815-484-2100 x1 or email techsupport@icico.com to have that added for you.
In the example below, the Punch operation is being restricted to only come from an approved IP. A number of IP can be listed and as long as it's in the list Punching will operate normally. If you doing this from an IP not in the list you will not see the Punch button.
Note: be sure that the IP Mask is always → 255.255.255.255