Addresses

Introduction

Addresses are used when defining endpoints for rules. They specify which computer or user will be governed by the rule.

These addresses are stored in a centralized list on the server. Each address can be used by one or more rules.

User Interface

The address list can be accessed by via the View, Addresses menu in the manager application:

The Address List Window allows you to modify the address list with the following options:

• New - Adds a new address to the list.
• Edit - Displays the properties of an address and allows you change its contents. The changes are reflected in all rules that use the address.
• Remove - Deletes the address from the list. Note that if one or more rules are using the address then their endpoints will be reset to 'Any'.

Address Properties

The Address Properties Window allows you to change the contents of an address. It can be accessed by selecting an address in the list and clicking the Edit button:

The Address Properties Window allows you to set both the address data and the type of address. There are four address types to choose from:

• Domain name - Select this option if you wish to limit a domain name, such as a website. Note that you should enter only the domain name portion without the protocol (i.e. without the preceding 'http://'). The Include Subdomains option will filter all traffic from domains that include the name in the root portion. For example, a domain name of 'test.com' will also filter domains such as 'host1.test.com' and 'host2.test.com'.
• IP Address - Enter the IP address of the computer or internet host you wish to limit. IP addresses are in the form of X.X.X.X where X is a value between 0 and 255.
• IP Address Range - Enter a range of IP addresses to filter. Rules that use this type of address will process all computers within the range. The starting address should be lower than the ending address, so a range of 192.168.0.20 to 192.168.0.10 is invalid.
• MAC address - Enter the MAC address of the computer. MAC addresses are used to uniquely identify network adapters. They are useful for networks that use DHCP or other types of addressing that may change over time. MAC addresses do not change even if the IP address changes. Note that physically changing the network adapter in a client computer will change the MAC address.

MAC Addresses

MAC addresses are not easily found on most networks. The Address Properties Window includes a lookup feature that will convert an IP address to a MAC address for you.

When you select the MAC address option, click the Find button which will bring up the MAC Address Lookup window:

Enter the IP address of the client computer you wish to find, then click Convert to MAC Address. Click Accept to use the new MAC address.

Note that MAC addresses are only valid for computers on the local network. Internet sites do not send MAC address information.