Table 6: Resource Tips - Extreme Networks Sentriant AG Software User's Manual

FQDN - Enter the fully qualified domain name (FQDN) of the resource. This resource can be an
●
Internet domain or the hostname of a network-attached device such as a file server or DNS
server. The accessibility of a more specific FQDN takes precedence over that of a less specific
domain name. For example, if you specified that mycompany.com was to be inaccessible but
www.mycompany.com was to be accessible, all Internet domains under mycompany.com
would be inaccessible except for all those under www.mycompany.com, all of which would be
accessible.
NOTE
The following caveats apply to the specification of resources:
■
Port numbers may be specified only for enforcement clusters using the inline quarantine method.
■ IP addresses may be specified only for enforcement clusters using the inline quarantine method or using
the DHCP quarantine method with static routes.
■ Hostnames may not be specified for enforcement clusters using the inline quarantine method.
b Select the Accessibility for the resource. The accessibility level overrides the Default resource
accessibility.
accessible - Quarantined endpoints may connect to the resource.
●
inaccessible - Quarantined endpoints may not connect to the resource.
●
c Click add.
NOTE
To add resources to the list quickly using the keyboard only, do the following:
1. Enter the Resource identifier.
2. Tab to Accessibility.
3. Use the up and down arrow keys to select the Accessibility.
4. Tab to the add button.
5. Press the enter key. After the resource is added to the list, focus will be given to the Resource text field,
and you can continue adding resources without the need to use the mouse.
3 Click ok.
The following table provides additional information about resources for quarantined endpoints.

Table 6: Resource Tips

Topic
Modes and IP
addresses
Ranges
Sentriant AG Software Users Guide, Version 5.3
Tip
When using inline mode, enter IP addresses rather than
domain names.
When using DHCP mode, use domain names for sites the
user needs to access, such as update servers, and use IP
addresses for endpoints that sit behind Sentriant AG, such
as authentication servers.
Use a hyphen for a range of IP addresses (10.0.16.1/30)
and a colon for a range of ports (10.0.16.1:80:90).
System Configuration
125