Managing Active Devices
The Active Devices page shows a list of the devices identified in internal networks. The information includes:
-
Name
-
IP addresses
Note - If a device has both IPv4 and IPv6 addresses, there is a single entry in the table.
-
MAC Address
-
Device Details - Type of device.
-
Network Access - Indicates whether the device is blocked from network activity.
-
Interface - Interface name.
-
Services - Shows incoming and outgoing services. Incoming services usually indicate servers.
-
Zone - Shows if the appliance is connected physically or through a wireless connection.
-
Traffic - Shows upload and download packet rates for all IP addresses when traffic monitoring is active.
Note - Traffic monitoring does not differentiate between IPv4 and IPv6 addresses..
To block a device temporarily:
Select the device and click Block.
Manage the display:
-
Save as - Save a selected device as a network object or server.
When you select this option, the New Network Object (see Managing Network Objects) window opens.
Enter the information in the fields and click Apply. Use these objects to reserve IP addresses to MAC addresses in the DHCP server and also add this object name as a device in the local DNS service. Network objects and server objects can be used in the security configurations, for example in the Access Policy and IPS exceptions
A server object also allows you to configure access and NAT if applicable as part of the object. If access and/or NAT are configured, automatic access rules are created in the Access Policy Rule Base.
-
Filter - Filter the list by servers, active devices, or known devices.
-
Details - Select a row in the list and click Details to show additional properties of the device.
-
Refresh - Refresh the information in the list.
-
Start/Stop Traffic Monitor - Gather upload and download packet rates for active devices. The information is shown in the added Traffic column in the table.
This operation may affect performance. To stop, click Stop Traffic Monitoring.
The display shows the devices connected to the gateway through a Hotspot. You can revoke the Hotspot access for one or more devices. This disconnects the device from the gateway and requires the device to log in again through the Hotspot.
To revoke the Hotspot access:
-
Click the record for the relevant device.
-
Click Revoke Hotspot Access.
The access for that device is revoked. You must log in again through the Hotspot to reconnect the device to the gateway.
|
Note - If there is no IPv6 activity in a dual stack host, the Active devices do not show the IPv6 address. |
|
Note - This page is available from the Home and Logs & Monitoring tabs. |
To add a new network object and bypass SSL inspection based on the host MAC address (locally managed only):
-
Click the Device Name > Save as and select Device type Network Object.
-
For Host MAC address, enter a custom value or select from the menu.
-
Select the checkbox for Bypass host with this MAC by SSL inspection.
-
Enter the Object name.
-
.
Note - You can also do this from the Users & Objects > Network Objects page. Click New, and then for Type, select Device.