Have you made sure that the AllowedIP range doesn't include the endpoint?