negate destination IP's

Reply
Highlighted
L4 Transporter

negate destination IP's

 

@reaper @BPry

Is you create an allow rule and then select to negate the destination IP's does that mean those IP's are blocked?

Highlighted
L5 Sessionator

Nope, it means all IPs except those will match that field in rule.

Highlighted
L4 Transporter

@santonic

Thats what I thought, they can be picked up by another rule and still be allowed

Highlighted
L7 Applicator

correct, it simply means "match everything except these"

Tom Piens - PANgurus.com
Find my book at amazon.com/dp/1789956374
Highlighted
L4 Transporter

@reaper @santonic

 

Just for curiousity what would be a good use case of using negate instead of just not adding those IP ranges to the rule

Highlighted
Cyber Elite

@jdprovine,

When there are specific IPs within a given range that you would want to exclude. For example; If I created a policy that says that everything within my 'GUEST' zone is denied from accessing anything within my 'SERVER' zone I would likely want to negate my switches so they could actually access NTP servers and DHCP services. 

Highlighted
L4 Transporter

@BPry

Then those IP's that you negate from that rule can still match on another rule and be allowed. I can see where it might save you time if you have alot of IP's to block and only a few that you don't want blocked on that rule

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!