LAN Configuration
106
ProSecure Unified Threat Management (UTM) Appliance
These are some advantages of the network database:
• Generally, you do not need to enter an IP address or a MAC address. Instead, you can
just select the name of the desired PC or device.
• There is no need to reserve an IP address for a PC in the DHCP server. All IP address
assignments made by the DHCP server are maintained until the PC or device is removed
from the network database, either by expiration (inactive for a long time) or by you.
• There is no need to use a fixed IP address on a PC. Because the IP address allocated by
the DHCP server never changes, you do not need to assign a fixed IP address to a PC to
ensure that it always has the same IP address.
• A PC is identified by its MAC address—not its IP address. The network database uses
the MAC address to identify each PC or device. Therefore, changing a PC’s IP address
does not affect any restrictions applied to that PC.
• Control over PCs can be assigned to groups and individuals:
- You can assign PCs to groups (see Manage the Network Database on this page) and
apply restrictions (outbound rules and inbound rules) to each group (see Use Rules to
Block or Allow Specific Kinds of Traffic on page 121).
- You can select groups that are allowed access to applications, web categories, and
URLs that you have blocked for all other users, or the other way around, block access
to applications, web categories, and URLs that you have allowed access to for all
other users (see Set Exception Rules for Web and Application Access on page 234).
- If necessary, you can also create firewall rules to apply to a single PC (see Enable
Source MAC Filtering on page 170). Because the MAC address is used to identify
each PC, users cannot avoid these restrictions by changing their IP address.
Manage the Network Database
You can view the network database, manually add or remove database entries, and edit
database entries.
To view the network database, select Network Config > LAN Settings > LAN Groups. The
LAN Groups screen displays. (The following figure shows some examples in the Known PCs
and Devices table.)