ProSecure Unified Threat Management (UTM) Appliance Reference Manual

Some advantages of the Network Database are:

Generally, you do not need to enter either IP address or MAC addresses. Instead, you can just select the name of the desired PC or device.

There is no need to reserve an IP address for a PC in the DHCP server. All IP address assignments made by the DHCP server are maintained until the PC or device is removed from the Network Database, either by expiration (inactive for a long time) or by you.

There is no need to use a fixed IP address on a PCs. Because the IP address allocated by the DHCP server never changes, you do not need to assign a fixed IP address to a PC to ensure it always has the same IP address.

A PC is identified by its MAC address—not its IP address. The Network Database uses the MAC address to identify each PC or device. Therefore, changing a PC’s IP address does not affect any restrictions applied to that PC.

Control over PCs can be assigned to groups and individuals:

You can assign PCs to groups (see “Managing the Network Database” on this page) and apply restrictions (outbound rules and inbound rules) to each group (see “Using Rules to Block or Allow Specific Kinds of Traffic” on page 5-3).

You can select groups that are allowed access to applications, Web categories, and URLs that you have blocked for all other users, or the other way around, block access to applications, Web categories, and URLs that you have allowed access to for all other users (see “Setting Web Access Exceptions and Scanning Exclusions” on page 6-41).

If necessary, you can also create firewall rules to apply to a single PC (see “Enabling Source MAC Filtering” on page 5-42). Because the MAC address is used to identify each PC, users cannot avoid these restrictions by changing their IP address.

Managing the Network Database

You can view the Network Database, manually add or remove database entries, and edit database entries.

To view the Network Database:

1.Select Network Config > LAN Settings from the menu. The LAN Settings submenu tabs appear, with the LAN Setup screen in view.

2.Click the LAN Groups submenu tab. The LAN Groups screen displays (see Figure 4-5 on page 4-14, which shows some examples in the Known PCs and Devices table).

LAN Configuration

4-13

v1.0, January 2010

Page 99
Image 99
NETGEAR UTM5-100NAS, UTM50-100NAS manual Managing the Network Database