IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Range IPs by groups

    Posted 02/14/20 02:17 PM

    Hi,

     

    I'm working with policies (v10.6) and I need create policies to control network accesses. I have a list of range IPs, ex:

     

    10.10.11.0/24

    10.10.12.0/24

    (...)

    10.12.10.0/19

    10.12.11.0/20

    (...)

     

    The examples of first block it's possible create a group:

    10.10.11.%

    10.10.12.%

     

    It's possible represent the second block in a group? The only solution that i know is create conditions inside the rule:

    ClientIP = 10.12.10.0 netmask 255.255.224.0

    ClientIP = 10.12.11.0 netmask 255.255.240.0

    This solution is very complex for many cases. Any solution to do that with groups?



    ------------------------------
    Chosko
    ------------------------------