Web Protection

Locations are used to identify your organization's network locations to Web Protection, so content filtering can be applied to them using a policy.

A location is simply an IP address from which Web Protection will accept and process DNS requests. Once specified, Web Protection will only accept and process DNS requests that originate from the IP address(es) that have been associated with your particular location(s).

Static IP is the most common location type. Follow these steps to Add a Static IP Location.

There are also other location types you can add:

Static IP is the most common location type, where the location has a static (fixed) public IP address. Once you add your static IP, this configures Web Protection to accept DNS requests only from that IP address.

Follow these steps to add a static IP location:

• Go to Environment > Locations and click Add.

• Select Static IP and the Add Location (Static IP) window displays:

• Enter details for this Static IP Location:

• Location Name: Give this location a name. For example, Main Office.

• Description: Enter an optional description.

• IP Address: Enter your IP address. You can enter a single IPv4 or IPv6 address, or a range of IPv4 addresses as a CIDR block e.g. 1.1.1.0/24.

• Policy: Select Inherited or Specific:

• Inherited: Select this option to apply a policy in order of precedence. See Order of Precedence for Policies.

• Specific: Select this option to choose a custom policy already created in Content Filtering > Policies.
  
  Note: If a user of this location can be identified, then any specific group or user policy will take priority over the location policy.

• Select Add.

Follow these steps to add a dynamic IP location:

Dynamic DNS can be used as an alternative to Dynamic IP to achieve the same result. With dynamic DNS, when the IP address associated with your dynamic DNS hostname changes, Web Protection automatically discovers this change and updates the location IP address.

To use dynamic DNS, you must first ensure this service is supported on your network. Many routers and other network appliances already have dynamic DNS functionality built in (refer to your appliances documentation for more information). You will also need to sign up with a dynamic DNS host provider who can issue you with a hostname and provide any software to be installed on your network.

Once you have dynamic DNS in place, follow the steps below to add a Dynamic DNS location:

• Go to Environment > Locations and click Add.

• Select Dynamic DNS and the Add Location (Dynamic DNS) window displays:

• Enter details for this Dynamic DNS Location:

• Location Name: Give this location a name. For example, Main Office.

• DNS Name: Enter your DNS name. For example, www.example.com.

• Policy: Select Inherited or Specific:

• Inherited: Select this option to apply a policy in order of precedence. See Order of Precedence for Policies.

• Specific: Select this option to choose a custom policy already created in Content Filtering > Policies.
  
  Note: If a user of this location can be identified, then any specific group or user policy will take priority over the location policy.

• Click 'Save'

Adding a Roaming Location

Adding a Virtual Location