Defining Computer Group Membership - Symantec 360R - Security Gateway SGS Administration Manual

Defining computer group membership

Configuring computers is the first step in configuring the firewall component of
the appliance.
When creating your security policy, assign the largest group of hosts to the
Everyone computer group to minimize the input and management of MAC
addresses. By default, all hosts belong to the Everyone computer group until you
configure them to one of the four other computer groups.
Review your security policy to determine how many computer groups you need
(if any) and which users should be assigned to each computer group.
The Computers tab lets you identify each computer by typing its MAC address,
assign a static IP address, assign it to a computer group, and bind it to a PPPoE
session (if your ISP offers multiple PPPoE sessions). See
Note: To find the MAC address of a Microsoft Windows-based computer, at a
DOS prompt, type ipconfig /all and look for the physical address.
On models 360 and 360R, you can restrict the computer to using only one of the
WAN ports. This is useful if you have two broadband accounts, one on each
WAN port, and you want a particular computer to use only one. This is useful for
servers or applications that must always use a specific WAN IP address such as
FTP. The default is disabled.
To configure computers
If you are using an ISP with PPPoE sessions, you bind a host to a session (WAN
IP) on this tab.
To stop the configuration process, you can click Cancel at anytime while
configuring computers. To clear all the information from the tab, you can click
Clear Form at any time.
Checking Reserve Host ensures that the DHCP server always offers the defined
IP address to the computer you are defining, or you can set this IP address as a
static address on the computer.
See "Computers tab field descriptions"
To configure a new computer
1 In the left pane, click Firewall.
2 On the Computers tab, in the Host Name text box, type a host name.
3 In the Adapter (MAC) Address text box, type the address of the host's
network interface card (NIC).
Understanding computers and computer groups
"PPPoE"
on page 177.
Network traffic control
on page 31.
65