Yes, you can restrict them from punching in/out via their IP addresses.
This can be done through Time >> Attendance >> Configuration.
When the IP Address range is given, the system will only take a punch in and punch out within that given IP range.
Can I not allow employees to punch in/out from their homes and anywhere outside their office premises? [FAQ]
