I have a customer with about 4000 total nodes needing SEP protection deployed.
These nodes are retail outlets - each server or workstation/PoS box has a specific role. Some retail outlets have up to 15 workstations and 1-2 servers.
The client is in the very early stages of rolling out SEP 12 (about 150 thus far). They have a need to exclude certain IP addresses globally and free up the middle octets.For example, if they set up stores systematically and 1 workstation and server role will always have the IP ending octet as .140 and another .160. So they would be private addressed at 10.x.x.140 and 10.x.x.160 at the stores with the two middle octets being the variable. Is it possible to have an exclusion rule that would allow the 2 middle octets be (anything) yet apply to any machine with the ending octet being .140 or .160 ? If not this will require the client to add in every subnet (300+) So they would like to be able to add something more like just a 10.x.x such as in the example above. Any suggestions or solutions are appreciated. Thanks!