Create Filter for External Node

This topic applies to both ViPNet Coordinator and ViPNet Client.

The Public Network includes a list of IP addresses for external nodes for which traffic is blocked by the protection system. By expanding the tree structure, you can see the protocol parameters for each blocked IP address. Some IP addresses from the list can belong to external nodes you trust and would include in the allowed list of the Public Network.

To add an IP address for a blocked external node to the Public Network:

1. Right-click any part of the record belonging to the external node and select Access Rules > Add a new rule from the pop-up menu.

   

   The following dialog box appears:

   

2. To add a:
   • filter to the Public Network containing the corresponding protocol filter, select Allow this protocol from this IP address ONLY.
   • protocol filter to the main filter <All unregistered IP addresses> in the Public Network, select Allow this protocol from ANY IP address.
   • passing first-level filter to the Public Network, select Allow ALL protocols from this IP address.
   • blocking first-level filter to the Public Network, select Block ALL protocols from this IP address.

     The newly created filter is named after the IP address it was created for.

3. To adjust (extend) the name of the new filter, either:
   • Right-click the new filter and select Resolve Name from the pop-up menu. The Find computer dialog box appears. It will search for the resolved system name.
   • Double-click the new filter in the Publish Network and when the Access rule dialog box appears, manually type your additional naming text in the Alias text box. Click OK to save your settings.

     

4. By default, notification messages about blocked IP packets are disabled. To enable notification messages:
   1. Click the Notification configuration link.
   2. Tick the Display a notification message for check box.
   3. Select your notification behavior.

      

Back to top

© 2007 Infotecs