Best Method to Restrict Access to Server

I am fairly new to the CyberArk community and have been tasked with better securing our logon pages for DEV and PROD. The goal is to block access to all but specific IP's. I can probably accomplish this through IIS but what do you all recommend?

Thanks in advance!