Managing The Network Database - NETGEAR UTM25-100NAS - Prosecure Utm Appliance 25U No Sub Included Reference Manual

ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
Some advantages of the Network Database are:
• Generally, you do not need to enter either IP address or MAC addresses. Instead, you can just
select the name of the desired PC or device.
• There is no need to reserve an IP address for a PC in the DHCP server. All IP address
assignments made by the DHCP server are maintained until the PC or device is removed from
the Network Database, either by expiration (inactive for a long time) or by you.
• There is no need to use a fixed IP address on a PCs. Because the IP address allocated by the
DHCP server never changes, you do not need to assign a fixed IP address to a PC to ensure it
always has the same IP address.
• A PC is identified by its MAC address—not its IP address. The Network Database uses the
MAC address to identify each PC or device. Therefore, changing a PC's IP address does not
affect any restrictions applied to that PC.
• Control over PCs can be assigned to groups and individuals:
– You can assign PCs to groups (see
apply restrictions (outbound rules and inbound rules) to each group (see
Block or Allow Specific Kinds of Traffic" on page
– You can select groups that are allowed access to applications, Web categories, and URLs
that you have blocked for all other users, or the other way around, block access to
applications, Web categories, and URLs that you have allowed access to for all other users
(see "Setting Web Access Exceptions and Scanning Exclusions" on page
– If necessary, you can also create firewall rules to apply to a single PC (see
Source MAC Filtering" on page
PC, users cannot avoid these restrictions by changing their IP address.

Managing the Network Database

You can view the Network Database, manually add or remove database entries, and edit database
entries.
To view the Network Database:
1. Select Network Config > LAN Settings from the menu. The LAN Settings submenu tabs
appear, with the LAN Setup screen in view.
2. Click the LAN Groups submenu tab. The LAN Groups screen displays (see
page 4-14, which shows some examples in the Known PCs and Devices table).
LAN Configuration
"Managing the Network
5-3).
5-40). Because the MAC address is used to identify each
v1.0, September 2009
Database" on this page) and
"Using Rules to
6-41).
"Enabling
Figure 4-5 on
4-13