IP Groups
An IP Group holds a set of IP addresses that you manage in one place. Policies select the group instead of repeating the addresses: Allowed IP List and Blocked IP List use IP groups.
An image containing IP Group settings is shown below:
Create an IP Group
Go to Identity > IP Groups and click Create. Fill in the fields below and click Save. Create saves the group and deploys it to the gateways.
| Field | Description |
|---|---|
| Name (Name) | Name of the IP Group. Required. A green check shows the name is available. |
| Description (Description) | Description of the IP Group. |
| IP Address (IP Address) | IP addresses of the group. Required. '*' and '-' characters can be used to specify IP ranges. To add many IPs at once, write all IPs separated by commas. IPs are parsed and added automatically. - The value '10.3.10.*' specifies IPs between '10.3.10.0' and '10.3.10.255'. - The value '10.3.10.4-18' represents IPs between '10.3.10.4' and '10.3.10.18' (4 and 18 included). |
Edit and Deploy
Click the name of a group in the list to open its page. Click Configure to change the name, description, or IP addresses.
When you click Save, a dialog shows which policies use the group, which gateways it reaches, and what each policy gains or loses after the deploy. Confirm to save the group and send it to the gateways in one step.
Activate and Deactivate
Open the ⋯ menu on the group page and use Status > Deactivate or Activate.
- An active group is on the gateways, and the policies that select it apply its addresses.
- A deactivated group is removed from every gateway. The group, its IP addresses, and the policies' selections stay. Policies that select it get none of its addresses until you activate it again.
- To deactivate a group, type its name in the confirmation dialog.
A deactivated or deleted IP group stops contributing addresses to the policies that select it. This does not make the policy stricter.
- Allowed IP List: The group's addresses are no longer allowed. If the policy has no other IP address or group left, its IP list becomes empty, and an empty Allowed IP List allows every address.
- Blocked IP List: The group's addresses are no longer blocked.
The save, deactivate, and delete dialogs list the affected policies and show these effects before you confirm. Check them first.
Other Actions
The ⋯ menu on the group page and the row menu in the list contain these actions:
- Open: Opens the group page (list only).
- Transfer: Duplicate, Export, and Move to Global. Move to Global moves the group to the Admin page, removes it from the project list, makes it available in all projects, and leaves management to the Admin user.
- History > Audit and Restore: Shows the change history of the group and restores an earlier version (group page).
- Delete: Deletes the group. The dialog lists the policies that use it and what each loses. The policies keep the deleted group in their selection, but the gateways skip it, so the warning above applies.