Adding client IP address ranges to the list of addresses that require authentication

Article:HOWTO81811  |  Created: 2012-10-25  |  Updated: 2012-10-25  |  Article URL http://www.symantec.com/docs/HOWTO81811
Article Type
How To


Subject


Adding client IP address ranges to the list of addresses that require authentication

You can specify those clients with IP addresses to which the Gateway Enforcer appliance authenticates.

You want to be aware of the following issues:

  • You must check the Enable option that is located next to the IP address or range if you want that address to be authenticated. If you want to temporarily disable authentication of an address or range, uncheck Enable.

  • If you type an invalid IP address, you receive an error message when you try to add it to the Client IP list.

See When to use client IP address ranges.

To restrict a client's network access despite authentication

  1. In the Symantec Endpoint Protection Manager Console, click Admin.

  2. Click Servers.

  3. Select and expand the Gateway Enforcer appliance groups.

  4. Under Tasks, click Edit Group Properties.

  5. In the Gateway Settings dialog box, on the Auth Range tab, in the Authenticate Client IP address range area, check Only authenticate clients with these IP addresses.

    If you do not check this option, any IP addresses listed are ignored. Therefore all clients who try to connect to the network are authenticated. If you check this option, the Gateway Enforcer appliance authenticates only the clients with the IP addresses that are added to the list.

  6. Click Add.

  7. In the Add Single IP Address dialog box, select from Single IP address to IP address range or Subnet.

    The fields change to enable you to enter the appropriate information.

  8. Select whether to add:

    • A single IP address

    • An IP address range

    • An IP address plus subnet mask

  9. Type either a single IP address, a start address and an end address of a range, or an IP address plus subnet mask.

  10. Click OK.

    The address information you typed is added to the Client IP address range table, with the Enable option selected.

  11. Continue to click Add and specify any other IP addresses or ranges of addresses that you want the Gateway Enforcer to authenticate.

  12. Click OK.


Legacy ID



v9514337_v81664632


Article URL http://www.symantec.com/docs/HOWTO81811


Terms of use for this information are found in Legal Notices