IP

IP Management

Manage IP

[TEMPLATE] > [IP]

Manages IP groups to be used in security policies. To set up an IP access control policy, an IP group must first be created, and each group can contain one or more IP addresses or ranges.

The list of major policies where IP groups are applied is as follows:

Template	Security Policy Tab	Detailed Policy
IP	Domain Security Policy	Method Policy
		Domain IP Policy
	URL Security Policy	IP Access Policy

Item	Description
ALL	Represents all registered IP ranges.
COUNTRY	IP ranges by country based on GeoLite. DeepFinder provides predefined country IP groups to control web server access by country. This can be used to allow or block access from specific countries.

Manage User IP Groups

ADD IP GROUP

[TEMPLATE] > [IP] > USER > Click [ADD IP GROUP] icon in the upper right

Adds a new user-defined IP group. Click the [ADD IP GROUP] icon, enter the information, and click [SAVE]. An audit log is created when the group is added.

Section	Item	Description
GROUP INFO	Name	Enter the name of the IP group.
	Company	Select the company that will own the IP group.
	Description	Enter a description for the IP group.
ADD IP	Start IP	Enter the start address of the IP range.
	End IP	Enter the end address of the IP range.
	Description	Enter a description for this IP range.

APPLY IP GROUP

[TEMPLATE] > [IP] > USER > (Select IP Group) > [Apply]

Applies the created IP group to domain security policies in batch. Select the IP group to apply and click the [Apply] button. Select the target domain groups, specify the response method (WHITE: Allow/Exception, BLACK: Block), and click the [APPLY] button to register the policy.

EDIT IP GROUP

[TEMPLATE] > [IP] > USER > (Select IP Group) > Click [EDIT] icon in the upper right

Modifies registered IP group information. Select the group from the list and click the [EDIT] icon. Change the information and click [SAVE] to complete the modification. A relevant audit log is created.

Danger

A warning window displays the list of domain groups, default policies, and snapshots currently using the IP group you intend to modify.
Modifying an IP group changes data integrity, so existing default policies and snapshots using this group may no longer be usable. Please exercise caution.

REMOVE IP GROUP

[TEMPLATE] > [IP] > USER > (Select IP Group) > Click [REMOVE] icon in the upper right

Deletes an IP group. Select the group to delete and click the [REMOVE] icon. A relevant audit log is created upon completion.

Danger

IP groups currently in use by Domain Group Policies or Default Policies cannot be deleted.
To delete, you must first delete the Default Policy referencing this group and stop using the group (change to None) in the Domain Group Policy. Once deletion is complete, existing snapshots that included this group will be disabled.

UPLOAD/DOWNLOAD IP GROUP

[TEMPLATE] > [IP] > USER > Click [UPLOAD] > (Select .df file to upload) > [UPLOAD] [TEMPLATE] > [IP] > USER > Click [DOWNLOAD] > (Select IP Group to download) > [DOWNLOAD]

You can back up user IP groups or share them with other Managers.

Select the IP group to download and click the [DOWNLOAD] button to generate a .df file applicable to other Manager servers.

You can restore IP groups by uploading a .df file downloaded from another Manager. Uploaded IP groups are prefixed with [IMPORTED] to identify them.

Manage User IPs

ADD IP

[TEMPLATE] > [IP] > USER > (Select IP Group) > Click [ADD IP] icon in the upper right

Adds a new IP range to the selected IP group. With the group selected, click the [ADD IP] icon in the upper right. Enter the information and click [SAVE] to complete the addition. A relevant audit log is created.

Item	Description
Start IP	Enter the start address of the IP range.
End IP	Enter the end address of the IP range.
Description	Enter a description for this IP range.

EDIT IP

[TEMPLATE] > [IP] > USER > (Select IP Group) > (Select IP) > Click [EDIT] icon in the upper right

Modifies registered IP information. Select the IP item to modify and click the [EDIT] icon. Change the information and click [SAVE] to complete the modification. A relevant audit log is created.

Danger

Modifying IP information changes the data integrity of policies and snapshots using that group, making related snapshots unusable. Please exercise caution.

REMOVE IP

[TEMPLATE] > [IP] > USER > (Select IP Group) > (Select IP) > Click [REMOVE] icon in the upper right

Deletes an IP. Select the IP item to delete and click the [REMOVE] icon. Be aware that deleting an IP from a group immediately stops the application of security policies for that IP. A relevant audit log is created upon deletion.

Danger

Deleting an IP item included in an active policy may affect the integrity of related default policies and snapshots.