Figure 59: System Configuration, Quarantine/Guest Resources Area - Extreme Networks Sentriant AG Software User's Manual

System Configuration

Figure 59: System Configuration, Quarantine/Guest Resources Area

1 Select the Default resource accessibility for quarantined endpoints.
accessible - By default, all resources are accessible to quarantined endpoints.
■
inaccessible - By default, no resources may be accessed by quarantined endpoints.
■
CAUTION
The accessible option should be used only if explicit, inaccessible resources have been very carefully defined under
Explicit resource accessibilities (see
than you intended such as subnets or servers having highly sensitive information.
In the extreme case, if the Default resource accessibility is set to accessible and there are NO inaccessible Explicit
resource accessibilities, then quarantined endpoints will have full network access.
2 Under Explicit resource accessibilities, enter one or more individual resources, along with their
accessibility levels. For each resource, do the following:
a Enter a unique identifier for the Resource. Enter one of the following:
IP address - Enter a single IP address or a range of IP addresses using a hyphen (-) or using
●
CIDR notation. (see
a port or port range with IP addresses (for example, 245.166.13.42:80 or 192.168.100.200:1:66).
124
step 2). Otherwise, quarantined endpoints may have access to more resources
Table 12, "CIDR Naming Conventions," on page 316). You may also include
Sentriant AG Software Users Guide, Version 5.3