Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Adding large number of hosts to host list

Created: 24 Feb 2011 | 4 comments
dimitri limanovski's picture
0 0 Votes
Login to vote

Does anyone know of a better way to add large number of hosts to host list, so they can later be added to a fwall policy for blocking?
Currently it's a painful act of exporting a policy, renaming to zip, extracing, modifying XML, saving back to zip, renaming back to dat and re-importing it in. Takes forever and works about 40% of the time. Is there a better way maybe? Via the database, perhaps? Can one populate the host list via API or SQL?
Thanks in advance!

Comments

Been_Jamming's picture
24
Feb
2011
1 Vote +1
Login to vote

Current I do not know of a

Current I do not know of a way, nor can I find a way to import a list of hosts to the Host Group.  It would be a nice functionality though.  You can always make suggestions via the Idea forums:

https://www-secure.symantec.com/connect/security/ideas

Manualy editing the database would most likely not be supported.

Rafeeq's picture
24
Feb
2011
0 Votes 0
Login to vote

Hi

You tried creating host groups.

https://www-secure.symantec.com/connect/articles/how-block-range-ip-addresses-subnets-using-symantec-endpoint-protection-firewall-rule

 

You are following this document right?

http://www.symantec.com/business/support/index?page=content&id=TECH91252&locale=en_US

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

dimitri limanovski's picture
25
Feb
2011
0 Votes 0
Login to vote

Hi Rafeeq, Yes, we are

Hi Rafeeq,

Yes, we are currently following the document in the last link, and it's a disasterous process to say the least. I can't add a list of IP hosts, because we need to block hosts by name, not IP. Sure wish there was a better way, but I guess we will wait for v12 to see if it has any new features.

Thanks!

pete_4u2002's picture
25
Feb
2011
0 Votes 0
Login to vote

you can put the thoughts

you can put the thoughts under the "Ideas section.