Modifying a Predefined Region
IP addresses are constantly changing. Therefore, the region identification signature database may not be up-to-date. If a predefined region is not up-to-date, you can modify it.
Context
Mismatch between regions and IP addresses can be identified during fault location. For example, you have configured a security policy allowing region A to access the enterprise server, but a PC in region A cannot access the server. The PC IP address may be added to another region that is not allowed to access the intranet. In this case, you can add the IP address to region A.
In the region list, predefined regions, which have no check boxes, are below the user-defined regions. You can use the search box to display a predefined region for modification.
Procedure
- Choose .
- You can perform the following operations:
Add an IP address to a predefined region.
Click
of a predefined region to
add an IP address to the IP Address dialog
box.
If the IP address you are adding to a predefined region has been added to a user-defined region or predefined region, the addition takes effect and the IP address is removed from the predefined or user-defined region to which the IP address belonged.
Exclude an IP address from a predefined region.
You cannot delete a single predefined IP address from a predefined region. However, the address can be deleted from the region if you add the address to another region. If you know the region of the IP address, you can add the IP address to the region. If not, you can add the IP address to region unknown-zone.
For example, if you find an IP address belonging to region B is in region A, you can add the IP address to region B. If you do not know which region the IP address belongs to, add it to region unknown-zone.