We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Gateway

Can I put an IP in more than on IP Subnet/Group?

  • Type: Knowledgebase
  • Date changed: 4 years ago
Solution #00007073 

Scope:
All Web Filters, all firmwares

Answer:

Yes you can, with certain limitations (see below).

Let's say, for example, you have a machine at 192.168.1.20 that you want to be part of your Servers group (192.168.1.0/24 subnet). You would also like to apply some special policies to that machine itself, because it is your WSUS Server.

1. Navigate to Block/Accept > IP Subnets/Groups.
2. Enter the information for the group: 192.168.1.0, 255.255.255.0, Servers, and Add.
3. Enter the information for the machine: 192.168.1.20. 255.255.255.255, WSUS Server, and Add.
4. Create policies for the machine and/or subnet.

The first policy to affect the specific IP will of course apply. If you have a block for the Servers group for Computing & Technology category first, and an domain allow for microsoft.com for the WSUS Server below it, the WSUS Server would be blocked from microsoft.com. On the other hand if you move the allow for microsoft above the block for Computing & Technology, the WSUS Server will be able to connect to microsoft.com, but none of the other servers in the group will be able to.

LIMITATIONS TO IDENTICAL ENTRIES FOR IPS

You may only have one entry per IP. You may not create an entry for for the same IP as your WSUS server, for example, such as 192.168.1.20, 255.255.255.255, Bob's Server; this will generate a "Duplicate value not allowed for IP Address" error. Since the issue is with a duplicate entry in the IP field,

This also means that you cannot create a second subnet entry for 192.168.1.0 (say with a 255.255.255.240 subnet mask to cover 16 IPs). You could, however, create one for 192.168.1.16, 255.255.255.240, which would cover some of the IPs in the range, including our .20 entry, in a third IP group.


Link To This Page:

https://campus.barracuda.com/solution/50160000000uHf4AAE